CVE-2021-46792

Name of the Vulnerable Software and Affected Versions ASP bootloader (affected versions not specified)

Description The issue is related to a Time-of-check Time-of-use (TOCTOU) condition in the BIOS2PSP command. This may allow an attacker with a malicious BIOS to create a race condition, causing the ASP bootloader to perform out-of-bounds SRAM reads upon an S3 resume event, potentially leading to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.