CVE-2021-46747: AMD SecureProcessor ASP Privilege Escalation
CVE-2021-46747 Published on June 1, 2026

Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures leading to a potential escalation of privileges.

NVD

Weakness Type

Insufficient Granularity of Access Control

The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad because it allows accesses from unauthorized agents to the security-sensitive assets.

Affected Versions

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics:

Version PicassoPI-FP5 1.0.0.E is unaffected.

AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors:

Version CastlePeakWSPI-sWRX8 1.0.0.9 is unaffected.
Version ChagallWSPI-sWRX8 1.0.0.2 is unaffected.

AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics:

Version ComboAM4v2 PI 1.2.0.6 is unaffected.

AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors:

Version ChagallWSPI-sWRX8 1.0.0.1 is unaffected.

AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics:

Version RenoirPI-FP6 1.0.0.8 is unaffected.

AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics:

Version PicassoPI-FP5 1.0.0.E is unaffected.

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics:

Version CezannePI-FP6 1.0.0.9 is unaffected.

AMD Ryzen™ 3000 Series Desktop Processors:

Version ComboAM4PI 1.0.0.9/ComboAM4 V2 PI 1.2.0.8 is unaffected.

AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics:

Version ComboAM4v2 PI 1.2.0.8 is unaffected.

AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics:

Version CezannePI-FP6 1.0.0.9 is unaffected.

AMD Ryzen™ 4000 Series Desktop Processors:

Version ComboAM4v2 PI 1.2.0.6 is unaffected.

AMD Ryzen™ 5000 Series Desktop Processors:

Version ComboAM4 V2 PI 1.2.0.8 is unaffected.

AMD Ryzen™ Embedded R1000 Series Processors:

Version EmbeddedPI-FP5_1.2.0.A is unaffected.

AMD Ryzen™ Embedded R2000 Series Processors:

Version EmbeddedPI-FP5_1002 is unaffected.

AMD Ryzen™ Embedded 5000 Series Processors:

Version EmbAM4PI 1.0.0.2 is unaffected.

AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge"):

Version EmbeddedPI-FP5_1.2.0.A is unaffected.

AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso"):

Version EmbeddedPI-FP5_1.2.0.A is unaffected.

AMD Ryzen™ Embedded V2000 Series Processors:

Version EmbeddedPI-FP6_1.0.0.6 is unaffected.

AMD Ryzen™ Embedded V3000 Series Processors:

Version EmbeddedPI-FP7r2_0080 is unaffected.

AMD Radeon™ RX 5000 Series Graphics Products:

Version AMD Software: Adrenalin Edition 25.11.1 (25.10.33.03) is unaffected.

AMD Radeon™ PRO W5000 Series Graphics Products:

Version AMD Software: PRO Edition 25.Q3.1 (25.10.32) is unaffected.

AMD Radeon™ RX 6000 Series Graphics Products:

Version AMD Software: Adrenalin Edition 25.11.1 (25.10.33.03) is unaffected.

AMD Radeon™ RX 7000 Series Graphics Products:

Version AMD Software: Adrenalin Edition 25.11.1 (25.10.33.03) is unaffected.

AMD Radeon™ PRO W6000 Series Graphics Products:

Version AMD Software: PRO Edition 25.Q3.1 (25.10.32) is unaffected.

AMD Radeon™ PRO W7000 Series Graphics Products:

Version AMD Software: PRO Edition 25.Q3.1 (25.10.32) is unaffected.

AMD Radeon™ PRO V520:

Version Contact your AMD Customer Engineering representative is unaffected.

AMD Radeon™ PRO V620:

Version Contact your AMD Customer Engineering representative is unaffected.

CVE-2021-46747: AMD SecureProcessor ASP Privilege EscalationCVE-2021-46747 Published on June 1, 2026

Weakness Type

Insufficient Granularity of Access Control

Affected Versions

CVE-2021-46747: AMD SecureProcessor ASP Privilege Escalation
CVE-2021-46747 Published on June 1, 2026