CVE-2021-26365
- State
- Published
- Severity
- 8.2 High
- Published
- May 9, 2023
- Updated
- Jan 28, 2025
- Reserved
- Jan 29, 2021
Description
Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information about out-of-bounds memory contents.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.2 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H | CISA-ADP |
Weaknesses
- CWE-125 Out-of-bounds Read
Affected Products
| Product | Versions |
|---|---|
Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4AMD |
|
Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4AMD |
|
Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULPAMD |
|
Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”AMD |
|
Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5AMD |
|
Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”AMD |
|
Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir”AMD |
|
Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”AMD |
|
Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”AMD |
|
Ryzen™ 6000 Series Mobile Processors "Rembrandt"AMD |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.