CVE-2021-46748: AMD Radeon Pro Vega 56 Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential denial of service.

Affected products

• AMD Radeon Pro Vega 56 Firmware: affected versions not specified
• AMD Radeon Pro Vega 64 Firmware: affected versions not specified
• AMD Radeon Rx Vega 56 Firmware: affected versions not specified
• AMD Radeon Rx Vega 64 Firmware: affected versions not specified
• AMD Radeon Software: before 23.7.1 (fixed in 23.7.1); before 23.q3 (fixed in 23.q3)
• Intel Radeon Rx Vega M Firmware: before 23.10.01.46 (fixed in 23.10.01.46)

Published 2023-11-14. Last modified 2026-06-17.