CVE-2021-26316

State: Published
Severity: 7.8 High
Published: Jan 10, 2023
Updated: Apr 9, 2025
Reserved: Jan 29, 2021

Description

Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
Ryzen 5000 SeriesAMD	various Affected
Ryzen 2000 SeriesAMD	various Affected
Ryzen 3000 SeriesAMD	various Affected
1st Gen EPYCAMD	various Affected
2nd Gen EPYCAMD	Various Affected
3rd Gen EPYCAMD	various Affected

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.