CVE-2021-46779: AMD Milanpi Firmware

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential loss of integrity and availability.

Affected products

• AMD Milanpi Firmware: before 1.0.0.4 (fixed in 1.0.0.4)
• AMD Naplespi Firmware: before 1.0.0.g (fixed in 1.0.0.g)
• AMD Romepi Firmware: before 1.0.0.c (fixed in 1.0.0.c)

Published 2023-01-11. Last modified 2026-06-17.