CVE-2021-26361

🗓️ 12 May 2022 17:46:01Reported by AMDType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 82 Views

A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to information disclosure

Reporter	Title	Published	Views	Family All 9
Amd	AMD Client Vulnerabilities – May 2022	10 May 202200:00	–	amd
Circl	CVE-2021-26361	12 May 202222:36	–	circl
CNNVD	AMD System Management Unit 信息泄露漏洞	12 May 202200:00	–	cnnvd
Cvelist	CVE-2021-26361	12 May 202217:46	–	cvelist
EUVD	EUVD-2021-13167	7 Oct 202500:30	–	euvd
Hewlett-Packard	AMD Client UEFI Firmware May 2022 Security Updates	10 May 202200:00	–	hp
NVD	CVE-2021-26361	12 May 202218:16	–	nvd
Prion	Information disclosure	12 May 202218:16	–	prion
Positive Technologies	PT-2022-9737 · Amd · Agesa Boot Loader +1	12 May 202200:00	–	ptsecurity

NVD

Node

amd radeon_softwareMatch-

Node

amd ryzen_3_2200u_firmwareMatch-

AND

amd ryzen_3_2200uMatch-

Node

amd ryzen_3_2300u_firmwareMatch-

AND

amd ryzen_3_2300uMatch-

Node

amd ryzen_3_5125c_firmwareMatch-

AND

amd ryzen_3_5125cMatch-

Node

amd ryzen_3_5400u_firmwareMatch-

AND

amd ryzen_3_5400uMatch-

Node

amd athlon_3050ge_firmwareMatch-

AND

amd athlon_3050geMatch-

Node

amd athlon_3150ge_firmwareMatch-

AND

amd athlon_3150geMatch-

Node

amd athlon_3150g_firmwareMatch-

AND

amd athlon_3150gMatch-

Node

amd ryzen_3_5425c_firmwareMatch-

AND

amd ryzen_3_5425cMatch-

Node

amd ryzen_3_5425u_firmwareMatch-

AND

amd ryzen_3_5425uMatch-

Node

amd ryzen_5_2500u_firmwareMatch-

AND

amd ryzen_5_2500uMatch-

Node

amd ryzen_5_2600_firmwareMatch-

AND

amd ryzen_5_2600Match-

Node

amd ryzen_5_2600h_firmwareMatch-

AND

amd ryzen_5_2600hMatch-

Node

amd ryzen_5_2600x_firmwareMatch-

AND

amd ryzen_5_2600xMatch-

Node

amd ryzen_5_5560u_firmwareMatch-

AND

amd ryzen_5_5560uMatch-

Node

amd ryzen_5_5600h_firmwareMatch-

AND

amd ryzen_5_5600hMatch-

Node

amd ryzen_5_5600hs_firmwareMatch-

AND

amd ryzen_5_5600hsMatch-

Node

amd ryzen_5_5600u_firmwareMatch-

AND

amd ryzen_5_5600uMatch-

Node

amd ryzen_5_5600x_firmwareMatch-

AND

amd ryzen_5_5600xMatch-

Node

amd ryzen_5_5625c_firmwareMatch-

AND

amd ryzen_5_5625cMatch-

Node

amd ryzen_5_5625u_firmwareMatch-

AND

amd ryzen_5_5625uMatch-

Node

amd ryzen_5_5700g_firmwareMatch-

AND

amd ryzen_5_5700gMatch-

Node

amd ryzen_5_5700ge_firmwareMatch-

AND

amd ryzen_5_5700geMatch-

Node

amd ryzen_7_2700u_firmwareMatch-

AND

amd ryzen_7_2700uMatch-

Node

amd ryzen_7_2700_firmwareMatch-

AND

amd ryzen_7_2700Match-

Node

amd ryzen_7_2700x_firmwareMatch-

AND

amd ryzen_7_2700xMatch-

Node

amd ryzen_7_2800h_firmwareMatch-

AND

amd ryzen_7_2800hMatch-

Node

amd ryzen_7_5800h_firmwareMatch-

AND

amd ryzen_7_5800hMatch-

Node

amd ryzen_7_5800hs_firmwareMatch-

AND

amd ryzen_7_5800hsMatch-

Node

amd ryzen_7_5800u_firmwareMatch-

AND

amd ryzen_7_5800uMatch-

Node

amd ryzen_7_5825c_firmwareMatch-

AND

amd ryzen_7_5825cMatch-

Node

amd ryzen_7_5825u_firmwareMatch-

AND

amd ryzen_7_5825uMatch-

Node

amd ryzen_9_5980hx_firmwareMatch-

AND

amd ryzen_9_5980hxMatch-

Node

amd ryzen_9_5980hs_firmwareMatch-

AND

amd ryzen_9_5980hsMatch-

Node

amd ryzen_9_5900hx_firmwareMatch-

AND

amd ryzen_9_5900hxMatch-

Node

amd ryzen_9_5900hs_firmwareMatch-

AND

amd ryzen_9_5900hsMatch-

[
  {
    "product": "Ryzen™ Series",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "product": "Athlon™ Series",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

Source	Link
amd	www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

21 Nov 2024 05:56Current

6Medium risk

Vulners AI Score6

CVSS 22.1

CVSS 3.15.5

EPSS0.0006