{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-02T07:51:19.183","vulnerabilities":[{"cve":{"id":"CVE-2021-46779","sourceIdentifier":"psirt@amd.com","published":"2023-01-11T08:15:13.213","lastModified":"2026-06-17T04:15:33.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential loss of integrity and availability.\n"},{"lang":"es","value":"Una validación de entrada insuficiente en la llamada al sistema SVC_ECC_PRIMITIVE en una aplicación de usuario comprometida o ABL puede permitir que un atacante corrompa la memoria del sistema operativo ASP (AMD Secure Processor), lo que puede provocar una posible pérdida de integridad y disponibilidad."}],"affected":[{"source":"psirt@amd.com","affectedData":[{"vendor":"AMD","product":"1st Gen EPYC","defaultStatus":"unaffected","packageName":"AGESA","platforms":["x86"],"versions":[{"version":"various ","status":"affected"}]},{"vendor":" AMD","product":"2nd Gen EPYC","defaultStatus":"unaffected","packageName":"AGESA","platforms":["x86"],"versions":[{"version":"various ","status":"affected"}]},{"vendor":"AMD","product":"3rd Gen EPYC","defaultStatus":"unaffected","packageName":"AGESA","platforms":["x86"],"versions":[{"version":"various ","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.2},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-09T14:47:15.527346Z","id":"CVE-2021-46779","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:amd:romepi_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.0.c","matchCriteriaId":"56013C45-044C-40B0-9503-7E3928602803"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:amd:romepi:-:*:*:*:*:*:*:*","matchCriteriaId":"B936879F-731E-4991-ACBB-16643F629B41"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:amd:milanpi_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.0.4","matchCriteriaId":"B11959F6-2A87-48A4-AD17-16A6B00C6BFA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:amd:milanpi:-:*:*:*:*:*:*:*","matchCriteriaId":"1F64A4AA-A66B-4B2E-B8F1-F332E3945903"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:amd:naplespi_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.0.g","matchCriteriaId":"BB1EE9F8-6AA6-48E1-A5C3-79A1FC70C821"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:amd:naplespi:-:*:*:*:*:*:*:*","matchCriteriaId":"9C479ABD-FE0C-4C08-B849-7BD516F03733"}]}]}],"references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032","source":"psirt@amd.com","tags":["Vendor Advisory"]},{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}