CVE-2021-26365

🗓️ 09 May 2023 18:58:57Reported by AMDType

Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information about out-of-bounds memory contents

Reporter	Title	Published	Views	Family All 10
Amd	Client Vulnerabilities – May 2023	9 May 202300:00	–	amd
CNNVD	AMD Secure Processor和AMD System Management Unit 缓冲区错误漏洞	9 May 202300:00	–	cnnvd
Cvelist	CVE-2021-26365	9 May 202318:58	–	cvelist
EUVD	EUVD-2021-13171	7 Oct 202500:30	–	euvd
Hewlett-Packard	AMD Client UEFI Firmware May 2023 Security Update	9 May 202300:00	–	hp
NVD	CVE-2021-26365	9 May 202319:15	–	nvd
OSV	CVE-2021-26365	9 May 202319:15	–	osv
Prion	Design/Logic Flaw	9 May 202319:15	–	prion
Positive Technologies	PT-2023-12092 · Amd · Amd Athlon 3000 Series Mobile Processors With Radeon Graphics Pollock +37	9 May 202300:00	–	ptsecurity
Vulnrichment	CVE-2021-26365	9 May 202318:58	–	vulnrichment

NVD

Node

amd ryzen_5_2400g_firmwareMatch-

AND

amd ryzen_5_2400gMatch-

Node

amd ryzen_5_2400ge_firmwareMatch-

AND

amd ryzen_5_2400geMatch-

Node

amd ryzen_3_2200ge_firmwareMatch-

AND

amd ryzen_3_2200geMatch-

Node

amd ryzen_3_2200g_firmwareMatch-

AND

amd ryzen_3_2200gMatch-

Node

amd ryzen_3_pro_2100ge_firmwareMatch-

AND

amd ryzen_3_pro_2100geMatch-

Node

amd ryzen_9_5900x_firmwareMatch-

AND

amd ryzen_9_5900xMatch-

Node

amd ryzen_9_5950x_firmwareMatch-

AND

amd ryzen_9_5950xMatch-

Node

amd ryzen_9_5900_firmwareMatch-

AND

amd ryzen_9_5900Match-

Node

amd ryzen_7_5800_firmwareMatch-

AND

amd ryzen_7_5800Match-

Node

amd ryzen_7_5800x_firmwareMatch-

AND

amd ryzen_7_5800xMatch-

Node

amd ryzen_7_5800x3d_firmwareMatch-

AND

amd ryzen_7_5800x3dMatch-

Node

amd ryzen_7_5700x_firmwareMatch-

AND

amd ryzen_7_5700xMatch-

Node

amd ryzen_5_5600_firmwareMatch-

AND

amd ryzen_5_5600Match-

Node

amd ryzen_5_5600x_firmwareMatch-

AND

amd ryzen_5_5600xMatch-

Node

amd ryzen_5_5500_firmwareMatch-

AND

amd ryzen_5_5500Match-

Node

amd ryzen_3_3200u_firmwareRange<picassopi-fp5_1.0.0.d

AND

amd ryzen_3_3200uMatch-

Node

amd ryzen_3_3250c_firmwareRange<picassopi-fp5_1.0.0.d

AND

amd ryzen_3_3250cMatch-

Node

amd ryzen_3_3250u_firmwareRange<picassopi-fp5_1.0.0.d

AND

amd ryzen_3_3250uMatch-

Node

amd amd_3015e_firmwareRange<pollockpi-ft5_1.0.0.3

AND

amd amd_3015eMatch-

Node

amd amd_3015ce_firmwareRange<pollockpi-ft5_1.0.0.3

AND

amd amd_3015ceMatch-

Node

amd ryzen_7_2800h_firmwareMatch-

AND

amd ryzen_7_2800hMatch-

Node

amd ryzen_7_2700u_firmwareMatch-

AND

amd ryzen_7_2700uMatch-

Node

amd ryzen_5_2600h_firmwareMatch-

AND

amd ryzen_5_2600hMatch-

Node

amd ryzen_5_2500u_firmwareMatch-

AND

amd ryzen_5_2500uMatch-

Node

amd ryzen_3_2300u_firmwareMatch-

AND

amd ryzen_3_2300uMatch-

Node

amd ryzen_3_2200u_firmwareMatch-

AND

amd ryzen_3_2200uMatch-

Node

amd ryzen_5_3400g_firmwareMatch-

AND

amd ryzen_5_3400gMatch-

Node

amd ryzen_5_pro_3400g_firmwareMatch-

AND

amd ryzen_5_pro_3400gMatch-

Node

amd ryzen_5_pro_3400ge_firmwareMatch-

AND

amd ryzen_5_pro_3400geMatch-

Node

amd ryzen_5_pro_3350g_firmwareMatch-

AND

amd ryzen_5_pro_3350gMatch-

Node

amd ryzen_5_pro_3350ge_firmwareMatch-

AND

amd ryzen_5_pro_3350geMatch-

Node

amd ryzen_3_pro_3200g_firmwareMatch-

AND

amd ryzen_3_pro_3200gMatch-

Node

amd ryzen_3_3200g_firmwareMatch-

AND

amd ryzen_3_3200gMatch-

Node

amd ryzen_3_3200ge_firmwareMatch-

AND

amd ryzen_3_3200geMatch-

Node

amd ryzen_3_pro_3200ge_firmwareMatch-

AND

amd ryzen_3_pro_3200geMatch-

Node

amd ryzen_7_5700u_firmwareRange<cezannepi-fp6_1.0.0.8

AND

amd ryzen_7_5700uMatch-

Node

amd ryzen_5_5500u_firmwareRange<cezannepi-fp6_1.0.0.8

AND

amd ryzen_5_5500uMatch-

Node

amd ryzen_3_5300u_firmwareRange<cezannepi-fp6_1.0.0.8

AND

amd ryzen_3_5300uMatch-

Node

amd ryzen_7_5700g_firmwareRange<cezannepi-fp6_1.0.0.8

AND

amd ryzen_7_5700gMatch-

Node

amd ryzen_7_5700ge_firmwareRange<cezannepi-fp6_1.0.0.8

AND

amd ryzen_7_5700geMatch-

Node

amd ryzen_5_5600g_firmwareRange<cezannepi-fp6_1.0.0.8

AND

amd ryzen_5_5600gMatch-

Node

amd ryzen_5_5600ge_firmwareRange<cezannepi-fp6_1.0.0.8

AND

amd ryzen_5_5600geMatch-

Node

amd ryzen_3_5300g_firmwareRange<cezannepi-fp6_1.0.0.8

AND

amd ryzen_3_5300gMatch-

Node

amd ryzen_3_5300ge_firmwareRange<cezannepi-fp6_1.0.0.8

AND

amd ryzen_3_5300geMatch-

Node

amd ryzen_9_6980hx_firmwareRange<rmb_1.0.0.4

AND

amd ryzen_9_6980hxMatch-

Node

amd ryzen_9_6980hs_firmwareRange<rmb_1.0.0.4

AND

amd ryzen_9_6980hsMatch-

Node

amd ryzen_9_6900hx_firmwareRange<rmb_1.0.0.4

AND

amd ryzen_9_6900hxMatch-

Node

amd ryzen_9_6900hs_firmwareRange<rmb_1.0.0.4

AND

amd ryzen_9_6900hsMatch-

Node

amd ryzen_7_6800h_firmwareRange<rmb_1.0.0.4

AND

amd ryzen_7_6800hMatch-

Node

amd ryzen_7_6800hs_firmwareRange<rmb_1.0.0.4

AND

amd ryzen_7_6800hsMatch-

Node

amd ryzen_7_6800u_firmwareRange<rmb_1.0.0.4

AND

amd ryzen_7_6800uMatch-

Node

amd ryzen_5_6600h_firmwareRange<rmb_1.0.0.4

AND

amd ryzen_5_6600hMatch-

Node

amd ryzen_5_6600hs_firmwareRange<rmb_1.0.0.4

AND

amd ryzen_5_6600hsMatch-

Node

amd ryzen_5_6600u_firmwareRange<rmb_1.0.0.4

AND

amd ryzen_5_6600uMatch-

[
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics  “Cezanne” AM4",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics   “Pollock”",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” ",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 6000 Series Mobile Processors  \"Rembrandt\"",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  }
]

Source	Link
amd	www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001

28 Jan 2025 16:15Current

8.7High risk

Vulners AI Score8.7

CVSS 3.18.2

EPSS0.00511

SSVC

CWE-125