high8.2

CVE-2021-26365

Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limit…

Impact

Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information about out-of-bounds memory contents.

Affected products

Vendor	Product	Affected versions
Amd	Ryzen 5 2400g Firmware	All versions
Amd	Ryzen 5 2400ge Firmware	All versions
Amd	Ryzen 3 2200ge Firmware	All versions
Amd	Ryzen 3 2200g Firmware	All versions
Amd	Ryzen 3 Pro 2100ge Firmware	All versions
Amd	Ryzen 9 5900x Firmware	All versions
Amd	Ryzen 9 5950x Firmware	All versions
Amd	Ryzen 9 5900 Firmware	All versions
Amd	Ryzen 7 5800 Firmware	All versions
Amd	Ryzen 7 5800x Firmware	All versions
Amd	Ryzen 7 5800x3d Firmware	All versions
Amd	Ryzen 7 5700x Firmware	All versions

Weakness classification

CWE-125

References

NVD record
CVE.org record
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001