CVE-2021-26384

Published: Jul 14, 2022Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources.

Affected (52)

Amd

52 products

Ryzen 7 5700g Firmware

Ryzen 7 5700ge Firmware

Ryzen 5 5600g Firmware

Ryzen 5 5600ge Firmware

Ryzen 3 5300g Firmware

Ryzen 3 5300ge Firmware

Ryzen 9 5980hx Firmware

Ryzen 9 5980hs Firmware

Ryzen 7 5825u Firmware

Ryzen 9 5900hx Firmware

Ryzen 9 5900hs Firmware

Ryzen 7 5825c Firmware

Ryzen 7 5800h Firmware

Ryzen 5 5625u Firmware

Ryzen 7 5800hs Firmware

Ryzen 5 5625c Firmware

Ryzen 5 5600h Firmware

Ryzen 5 5600hs Firmware

Ryzen 7 5800u Firmware

Ryzen 5 5600u Firmware

Ryzen 5 5560u Firmware

Ryzen 3 5425u Firmware

Ryzen 3 5425c Firmware

Ryzen 3 5400u Firmware

Ryzen 3 5125c Firmware

Athlon Silver 3050u Firmware

Athlon Gold 3150u Firmware

Ryzen 3 3200u Firmware

Ryzen 3 3250u Firmware

Ryzen 3 3300u Firmware

Ryzen 3 3350u Firmware

Ryzen 3 3450u Firmware

Ryzen 3 3500u Firmware

Ryzen 3 3500c Firmware

Ryzen 3 3550h Firmware

Ryzen 3 3580u Firmware

Ryzen 3 3700u Firmware

Ryzen 3 3700c Firmware

Ryzen 3 3750h Firmware

Ryzen 3 3780u Firmware

Ryzen 3 2200u Firmware

Ryzen 3 2300u Firmware

Ryzen 5 2500u Firmware

Ryzen 5 2600 Firmware

Ryzen 5 2600h Firmware

Ryzen 5 2600x Firmware

Ryzen 5 2700 Firmware

Ryzen 5 2700x Firmware

Ryzen 7 2700 Firmware

Ryzen 7 2700u Firmware

Ryzen 7 2700x Firmware

Ryzen 7 2800h Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5700g Firmware	Before comboam4_v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 7 5700g	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5700ge Firmware	Before comboam4_v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 7 5700ge	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5600g Firmware	Before comboam4_v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 5 5600g	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5600ge Firmware	Before comboam4_v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 5 5600ge	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5300g Firmware	Before comboam4_v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 3 5300g	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5300ge Firmware	Before comboam4_v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 3 5300ge	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 5980hx Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 9 5980hx	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 5980hs Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 9 5980hs	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5825u Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 7 5825u	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 5900hx Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 9 5900hx	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 5900hs Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 9 5900hs	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5825c Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 7 5825c	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5800h Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 7 5800h	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5625u Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 5 5625u	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5800hs Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 7 5800hs	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5625c Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 5 5625c	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5600h Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 5 5600h	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5600hs Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 5 5600hs	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5800u Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 7 5800u	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5600u Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 5 5600u	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5560u Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 5 5560u	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5425u Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 3 5425u	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5425c Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 3 5425c	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5400u Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 3 5400u	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5125c Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 3 5125c	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Athlon Silver 3050u Firmware	All versions

Running on/with	Platform Versions
Amd Athlon Silver 3050u	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Athlon Gold 3150u Firmware	All versions

Running on/with	Platform Versions
Amd Athlon Gold 3150u	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3200u Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 3200u	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3250u Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 3250u	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3300u Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 3300u	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3350u Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 3350u	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3450u Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 3450u	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3500u Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 3500u	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3500c Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 3500c	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3550h Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 3550h	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3580u Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 3580u	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3700u Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 3700u	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3700c Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 3700c	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3750h Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 3750h	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3780u Firmware	All versions

Running on/with	Platform Versions
Amd Ryzen 3 3780u	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 2200u Firmware	Before comboam4v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 3 2200u	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 2300u Firmware	Before comboam4v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 3 2300u	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 2500u Firmware	Before comboam4v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 5 2500u	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 2600 Firmware	Before comboam4v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 5 2600	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 2600h Firmware	Before comboam4v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 5 2600h	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 2600x Firmware	Before comboam4v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 5 2600x	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 2700 Firmware	Before comboam4v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 5 2700	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 2700x Firmware	Before comboam4v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 5 2700x	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 2700 Firmware	Before comboam4v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 7 2700	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 2700u Firmware	Before comboam4v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 7 2700u	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 2700x Firmware	Before comboam4v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 7 2700x	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 2800h Firmware	Before comboam4v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 7 2800h	All versions

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

Source: psirt@amd.com

Vendor Advisory

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.