CVE-2021-46757: AMD Ryzen Embedded 5600e Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the ASP Secure OS kernel virtual address space potentially leading to privilege escalation.

Affected products

• AMD Ryzen Embedded 5600e Firmware: before embam4pi_1.0.0.0 (fixed in embam4pi_1.0.0.0)
• AMD Ryzen Embedded 5800e Firmware: before embam4pi_1.0.0.0 (fixed in embam4pi_1.0.0.0)
• AMD Ryzen Embedded 5900e Firmware: before embam4pi_1.0.0.0 (fixed in embam4pi_1.0.0.0)
• AMD Ryzen Embedded 5950e Firmware: before embam4pi_1.0.0.0 (fixed in embam4pi_1.0.0.0)
• AMD Ryzen Embedded r2312 Firmware: before embeddedpi-fp6_1.0.0.6 (fixed in embeddedpi-fp6_1.0.0.6)
• AMD Ryzen Embedded r2314 Firmware: before embeddedpi-fp6_1.0.0.6 (fixed in embeddedpi-fp6_1.0.0.6)
• AMD Ryzen Embedded v2516 Firmware: before embeddedpi-fp6_1.0.0.6 (fixed in embeddedpi-fp6_1.0.0.6)
• AMD Ryzen Embedded v2546 Firmware: before embeddedpi-fp6_1.0.0.6 (fixed in embeddedpi-fp6_1.0.0.6)
• AMD Ryzen Embedded v2718 Firmware: before embeddedpi-fp6_1.0.0.6 (fixed in embeddedpi-fp6_1.0.0.6)
• AMD Ryzen Embedded v2748 Firmware: before embeddedpi-fp6_1.0.0.6 (fixed in embeddedpi-fp6_1.0.0.6)

Published 2024-02-13. Last modified 2026-06-17.