CVE-2021-46792: AMD Athlon Gold 3150g Firmware

Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a race condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon an S3 resume event potentially leading to a denial of service.

Affected products

  • AMD Athlon Gold 3150g Firmware: version picassopi-fp5_1.0.0.4 only
  • AMD Athlon Gold 3150ge Firmware: version picassopi-fp5_1.0.0.4 only
  • AMD Athlon Silver 3050ge Firmware: version picassopi-fp5_1.0.0.4 only
  • AMD Ryzen 1200 (af) Firmware: version pinnaclepi-am4_1.0.0.7 only; version raven-fp5-am4_1.0.0.9 only
  • AMD Ryzen 1600 (af) Firmware: version pinnaclepi-am4_1.0.0.7 only; version raven-fp5-am4_1.0.0.9 only
  • AMD Ryzen 2200g Firmware: version pinnaclepi-am4_1.0.0.7 only; version raven-fp5-am4_1.0.0.9 only
  • AMD Ryzen 2200ge Firmware: version pinnaclepi-am4_1.0.0.7 only; version raven-fp5-am4_1.0.0.9 only
  • AMD Ryzen 2300x Firmware: version pinnaclepi-am4_1.0.0.7 only; version raven-fp5-am4_1.0.0.9 only
  • AMD Ryzen 2400g Firmware: version pinnaclepi-am4_1.0.0.7 only; version raven-fp5-am4_1.0.0.9 only
  • AMD Ryzen 2400ge Firmware: version pinnaclepi-am4_1.0.0.7 only; version raven-fp5-am4_1.0.0.9 only
  • AMD Ryzen 2500x Firmware: version pinnaclepi-am4_1.0.0.7 only; version raven-fp5-am4_1.0.0.9 only
  • AMD Ryzen 2600 Firmware: version pinnaclepi-am4_1.0.0.7 only; version raven-fp5-am4_1.0.0.9 only
  • AMD Ryzen 2600e Firmware: version pinnaclepi-am4_1.0.0.7 only; version raven-fp5-am4_1.0.0.9 only
  • AMD Ryzen 2600x Firmware: version pinnaclepi-am4_1.0.0.7 only; version raven-fp5-am4_1.0.0.9 only
  • AMD Ryzen 2700 Firmware: version pinnaclepi-am4_1.0.0.7 only; version raven-fp5-am4_1.0.0.9 only
  • AMD Ryzen 2700e Firmware: version pinnaclepi-am4_1.0.0.7 only; version raven-fp5-am4_1.0.0.9 only
  • AMD Ryzen 2700x Firmware: version pinnaclepi-am4_1.0.0.7 only; version raven-fp5-am4_1.0.0.9 only
  • AMD Ryzen 2920x Firmware: version pinnaclepi-am4_1.0.0.7 only; version raven-fp5-am4_1.0.0.9 only
  • AMD Ryzen 2950x Firmware: version pinnaclepi-am4_1.0.0.7 only; version raven-fp5-am4_1.0.0.9 only
  • AMD Ryzen 2970wx Firmware: version pinnaclepi-am4_1.0.0.7 only; version raven-fp5-am4_1.0.0.9 only
  • AMD Ryzen 2990wx Firmware: version pinnaclepi-am4_1.0.0.7 only; version raven-fp5-am4_1.0.0.9 only
  • AMD Ryzen 3100 Firmware: version comboam4v2_pi_1.2.0.5 only; version picasso_pi-fp5_1.0.0.4 only; version renoirpi-fp6_1.0.0.7 only
  • AMD Ryzen 3300x Firmware: version comboam4v2_pi_1.2.0.5 only; version picasso_pi-fp5_1.0.0.4 only; version renoirpi-fp6_1.0.0.7 only
  • AMD Ryzen 3500 Firmware: version comboam4v2_pi_1.2.0.5 only; version picasso_pi-fp5_1.0.0.4 only; version renoirpi-fp6_1.0.0.7 only
  • AMD Ryzen 3500x Firmware: version comboam4v2_pi_1.2.0.5 only; version picasso_pi-fp5_1.0.0.4 only; version renoirpi-fp6_1.0.0.7 only
  • and 30 more

Published 2023-05-09. Last modified 2026-06-17.