CVE-2021-46766: AMD Epyc 9124 Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.

Affected products

  • AMD Epyc 9124 Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9174f Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9184x Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9224 Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9254 Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9274f Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9334 Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9354 Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9354p Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9374f Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9384x Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9454 Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9454p Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9474f Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9534 Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9554 Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9554p Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9634 Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9654 Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9654p Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9684x Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9734 Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9754 Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Epyc 9754s Firmware: before genoapi_1.0.0.4 (fixed in genoapi_1.0.0.4)
  • AMD Ryzen Threadripper Pro 3945wx Firmware: before chagallwspi-swrx8_1.0.0.5 (fixed in chagallwspi-swrx8_1.0.0.5)
  • and 3 more

Published 2023-11-14. Last modified 2026-06-17.