CVE-2021-26344

State: Published
Severity: 7.2 High
Published: Aug 13, 2024
Updated: Mar 18, 2025
Reserved: Jan 29, 2021

Description

An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with access the ability to modify the BIOS image, and the ability to sign the resulting image, to potentially modify the APCB block resulting in arbitrary code execution.

Scores

CVSS	Score	Vector	Source
3.1	7.2 High	CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H	AMD

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
AMD EPYC™ 7001 Series ProcessorsAMD	variousAffected
AMD EPYC™ 7002 Series ProcessorsAMD	RomePI 1.0.0.CNot affected
AMD EPYC™ 7003 Series ProcessorsAMD	MilanPI 1.0.0.5Not affected
AMD Ryzen™ 3000 Series Desktop ProcessorsAMD	variousAffected
AMD Ryzen™ 5000 Series Desktop ProcessorsAMD	ComboAM4V2 1.2.0.ANot affected
AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ GraphicsAMD	ComboAM4V2 1.2.0.ANot affected
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ GraphicsAMD	variousAffected
AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ GraphicsAMD	variousAffected
AMD Ryzen™ Threadripper™ 3000 Series ProcessorsAMD	variousAffected
AMD Ryzen™ Threadripper™ PRO 5000WX ProcessorsAMD	ChagallWSPI-sWRX8 1.0.0.6Not affected
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD	variousAffected
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD	variousAffected
AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD	variousAffected
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsAMD	variousAffected
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsAMD	variousAffected
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsAMD	CezannePI-FP6 1.0.0.ENot affected
AMD Ryzen™ 7020 Series Processors with Radeon™ GraphicsAMD	MendocinoPI-FT6 1.0.0.3Not affected
AMD Ryzen™ 6000 Series Processors with Radeon™ GraphicsAMD	RembrandtPI-FP7 1.0.0.7Not affected
AMD Ryzen™ 7035 Series Processors with Radeon™ GraphicsAMD	RembrandtPI-FP7 1.0.0.7Not affected
AMD Ryzen™ 5000 Series Processors with Radeon™ GraphicsAMD	CezannePI-FP6 1.0.0.ENot affected
AMD Ryzen™ 3000 Series Processors with Radeon™ GraphicsAMD	CezannePI-FP6 1.0.0.ENot affected
AMD EPYC™ Embedded 7002 Series ProcessorsAMD	EmbRomePI-SP3 1.0.0.6Not affected
AMD EPYC™ Embedded 3000 Series ProcessorsAMD	VariousAffected
AMD EPYC™ Embedded 7003 Series ProcessorsAMD	EmbMilanPI-SP3 1.0.0.2Not affected
AMD Ryzen™ Embedded R1000 Series ProcessorsAMD	vAffected
AMD Ryzen™ Embedded R2000 Series ProcessorsAMD	vAffected
AMD Ryzen™ Embedded 5000 Series ProcessorsAMD	vAffected
AMD Ryzen™ Embedded V1000 Series ProcessorsAMD	vAffected
AMD Ryzen™ Embedded V2000 Series ProcessorsAMD	vAffected
AMD Ryzen™ Embedded V3000 Series ProcessorsAMD	EmbeddedPI-FP7r2 1.0.0.4Not affected

References

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.htmlvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.