CVE-2021-46795: AMD Cezannepi-FP6 Firmware

Medium severity, CVSS 4.7. EPSS: 0.1% chance of exploitation in the next 30 days.

A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service.

Affected products

• AMD Cezannepi-FP6 Firmware: before 1.0.0.6 (fixed in 1.0.0.6)
• AMD COMBOAM4V2 Pi Firmware: before 1.2.0.5 (fixed in 1.2.0.5)
• AMD Renoirpi-FP6 Firmware: before 1.0.0.7 (fixed in 1.0.0.7)

Published 2023-01-11. Last modified 2026-06-17.