CVE-2021-39298
- State
- Published
- Severity
- 6.5 Medium
- Published
- Feb 16, 2022
- Updated
- Oct 7, 2026
- Reserved
- Aug 19, 2021
Description
A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
- CWE-269 Improper Privilege Management
Affected Products
| Product | Versions |
|---|---|
2nd Gen EPYCAMD |
|
3rd Gen EPYCAMD |
|
Ryzen 2000 SeriesAMD |
|
Ryzen 3000 SeriesAMD |
|
Ryzen 5000 SeriesAMD |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.