CVE-2021-26369

Published: May 12, 2022Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses.

Affected (50)

Amd

50 products

Radeon Software

Athlon 3050ge Firmware

Athlon 3150g Firmware

Athlon 3150ge Firmware

Ryzen 3 2200u Firmware

Ryzen 3 2300u Firmware

Ryzen 3 3100 Firmware

Ryzen 3 3300g Firmware

Ryzen 3 3300x Firmware

Ryzen 3 5125c Firmware

Ryzen 3 5400u Firmware

Ryzen 3 5425c Firmware

Ryzen 3 5425u Firmware

Ryzen 5 2500u Firmware

Ryzen 5 2600 Firmware

Ryzen 5 2600h Firmware

Ryzen 5 2600x Firmware

Ryzen 5 3400g Firmware

Ryzen 5 3450g Firmware

Ryzen 5 3600 Firmware

Ryzen 5 3600x Firmware

Ryzen 5 5600h Firmware

Ryzen 5 5600hs Firmware

Ryzen 5 5600u Firmware

Ryzen 5 5600x Firmware

Ryzen 5 5625c Firmware

Ryzen 5 5625u Firmware

Ryzen 5 5700g Firmware

Ryzen 5 5700ge Firmware

Ryzen 7 2700 Firmware

Ryzen 7 2700u Firmware

Ryzen 7 2700x Firmware

Ryzen 7 2800h Firmware

Ryzen 7 3700x Firmware

Ryzen 7 3800x Firmware

Ryzen 7 5800h Firmware

Ryzen 7 5800hs Firmware

Ryzen 7 5800u Firmware

Ryzen 7 5825c Firmware

Ryzen 7 5825u Firmware

Ryzen 9 3900x Firmware

Ryzen 9 3950x Firmware

Ryzen 9 5900hs Firmware

Ryzen 9 5900hx Firmware

Ryzen 9 5980hs Firmware

Ryzen 9 5980hx Firmware

Ryzen Threadripper 2920x Firmware

Ryzen Threadripper 2950x Firmware

Ryzen Threadripper 2970wx Firmware

Ryzen Threadripper 2990wx Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Amd Radeon Software	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Athlon 3050ge Firmware	All versions

Running on/with	Platform Versions
Amd Athlon 3050ge	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Athlon 3150g Firmware	All versions

Running on/with	Platform Versions
Amd Athlon 3150g	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Athlon 3150ge Firmware	All versions

Running on/with	Platform Versions
Amd Athlon 3150ge	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 2200u Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 2200u	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 2300u Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 2300u	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3100 Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 3100	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3300g Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 3300g	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3300x Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 3300x	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5125c Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 5125c	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5400u Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 5400u	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5425c Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 5425c	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5425u Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 5425u	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 2500u Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 5 2500u	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 2600 Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 5 2600	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 2600h Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 5 2600h	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 2600x Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 5 2600x	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 3400g Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 5 3400g	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 3450g Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 5 3450g	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 3600 Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 5 3600	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 3600x Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 5 3600x	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5600h Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 5 5600h	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5600hs Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 5 5600hs	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5600u Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 5 5600u	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5600x Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 5 5600x	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5625c Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 5 5625c	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5625u Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 5 5625u	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5700g Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 5 5700g	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5700ge Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 5 5700ge	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 2700 Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 7 2700	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 2700u Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 7 2700u	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 2700x Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 7 2700x	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 2800h Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 7 2800h	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 3700x Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 7 3700x	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 3800x Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 7 3800x	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5800h Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 7 5800h	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5800hs Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 7 5800hs	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5800u Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 7 5800u	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5825c Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 7 5825c	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5825u Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 7 5825u	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 3900x Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 9 3900x	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 3950x Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 9 3950x	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 5900hs Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 9 5900hs	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 5900hx Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 9 5900hx	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 5980hs Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 9 5980hs	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 5980hx Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 9 5980hx	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen Threadripper 2920x Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen Threadripper 2920x	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen Threadripper 2950x Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen Threadripper 2950x	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen Threadripper 2970wx Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen Threadripper 2970wx	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen Threadripper 2990wx Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen Threadripper 2990wx	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

Source: psirt@amd.com

Vendor Advisory

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.