medium5.5
CVE-2021-26361
A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 …
Impact
A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to information disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Radeon Software | All versions |
| Amd | Ryzen 3 2200u Firmware | All versions |
| Amd | Ryzen 3 2300u Firmware | All versions |
| Amd | Ryzen 3 5125c Firmware | All versions |
| Amd | Ryzen 3 5400u Firmware | All versions |
| Amd | Athlon 3050ge Firmware | All versions |
| Amd | Athlon 3150ge Firmware | All versions |
| Amd | Athlon 3150g Firmware | All versions |
| Amd | Ryzen 3 5425c Firmware | All versions |
| Amd | Ryzen 3 5425u Firmware | All versions |
| Amd | Ryzen 5 2500u Firmware | All versions |
| Amd | Ryzen 5 2600 Firmware | All versions |