CVE-2021-46750CWE-190

Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to send malformed messages to the graphics…

Low · published September 6, 2025

CVSS v3.1
3.0
EPSS
0%
Percentile
3.9
In the wild
Unconfirmed
What it is

Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to send malformed messages to the graphics mailbox resulting in an overlap of a TMR (Trusted Memory Region) that was previously allocated by the ASP bootloader leading to a potential loss of integrity.

The record
Technical detail
CVSS v3.1
3.0 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00151 · 3.9th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2025-09-06T16:03Z
EPSS history
Timeline
  • 06 SEP 16:03Z
    Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to send malformed messages to the graphics…
    cvelistv5