medium5.5
CVE-2021-26346
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory tab…
Impact
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Ryzen 3 3100 Firmware | All versions |
| Amd | Ryzen 3 3200g Firmware | All versions |
| Amd | Ryzen 3 3200u Firmware | All versions |
| Amd | Ryzen 3 3250c Firmware | All versions |
| Amd | Ryzen 3 3250u Firmware | All versions |
| Amd | Ryzen 3 3300g Firmware | All versions |
| Amd | Ryzen 3 3300u Firmware | All versions |
| Amd | Ryzen 3 3300x Firmware | All versions |
| Amd | Ryzen 3 3350u Firmware | All versions |
| Amd | Ryzen 3 3450u Firmware | All versions |
| Amd | Ryzen 3 3500c Firmware | All versions |
| Amd | Ryzen 3 3500u Firmware | All versions |