Lucene search

AMDCVE-2021-26369

HistoryMay 12, 2022 - 6:16 p.m.

CVE-2021-26369

2022-05-1218:16:53

CWE-119

AMD

web.nvd.nist.gov

cve-2021-26369

uapp

abl

system call

vulnerability

malware

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

Percentile

12.6%

JSON

A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses.

Affected configurations

Nvd

Node

amdradeon_softwareMatch-

Node

amdathlon_3050ge_firmwareMatch-

AND

amdathlon_3050geMatch-

Node

amdathlon_3150g_firmwareMatch-

AND

amdathlon_3150gMatch-

Node

amdathlon_3150ge_firmwareMatch-

AND

amdathlon_3150geMatch-

Node

amdryzen_3_2200u_firmwareMatch-

AND

amdryzen_3_2200uMatch-

Node

amdryzen_3_2300u_firmwareMatch-

AND

amdryzen_3_2300uMatch-

Node

amdryzen_3_3100_firmwareMatch-

AND

amdryzen_3_3100Match-

Node

amdryzen_3_3300g_firmwareMatch-

AND

amdryzen_3_3300gMatch-

Node

amdryzen_3_3300x_firmwareMatch-

AND

amdryzen_3_3300xMatch-

Node

amdryzen_3_5125c_firmwareMatch-

AND

amdryzen_3_5125cMatch-

Node

amdryzen_3_5400u_firmwareMatch-

AND

amdryzen_3_5400uMatch-

Node

amdryzen_3_5425c_firmwareMatch-

AND

amdryzen_3_5425cMatch-

Node

amdryzen_3_5425u_firmwareMatch-

AND

amdryzen_3_5425uMatch-

Node

amdryzen_5_2500u_firmwareMatch-

AND

amdryzen_5_2500uMatch-

Node

amdryzen_5_2600_firmwareMatch-

AND

amdryzen_5_2600Match-

Node

amdryzen_5_2600h_firmwareMatch-

AND

amdryzen_5_2600hMatch-

Node

amdryzen_5_2600x_firmwareMatch-

AND

amdryzen_5_2600xMatch-

Node

amdryzen_5_3400g_firmwareMatch-

AND

amdryzen_5_3400gMatch-

Node

amdryzen_5_3450g_firmwareMatch-

AND

amdryzen_5_3450gMatch-

Node

amdryzen_5_3600_firmwareMatch-

AND

amdryzen_5_3600Match-

Node

amdryzen_5_3600x_firmwareMatch-

AND

amdryzen_5_3600xMatch-

Node

amdryzen_5_5600h_firmwareMatch-

AND

amdryzen_5_5600hMatch-

Node

amdryzen_5_5600hs_firmwareMatch-

AND

amdryzen_5_5600hsMatch-

Node

amdryzen_5_5600u_firmwareMatch-

AND

amdryzen_5_5600uMatch-

Node

amdryzen_5_5600x_firmwareMatch-

AND

amdryzen_5_5600xMatch-

Node

amdryzen_5_5625c_firmwareMatch-

AND

amdryzen_5_5625cMatch-

Node

amdryzen_5_5625u_firmwareMatch-

AND

amdryzen_5_5625uMatch-

Node

amdryzen_5_5700g_firmwareMatch-

AND

amdryzen_5_5700gMatch-

Node

amdryzen_5_5700ge_firmwareMatch-

AND

amdryzen_5_5700geMatch-

Node

amdryzen_7_2700_firmwareMatch-

AND

amdryzen_7_2700Match-

Node

amdryzen_7_2700u_firmwareMatch-

AND

amdryzen_7_2700uMatch-

Node

amdryzen_7_2700x_firmwareMatch-

AND

amdryzen_7_2700xMatch-

Node

amdryzen_7_2800h_firmwareMatch-

AND

amdryzen_7_2800hMatch-

Node

amdryzen_7_3700x_firmwareMatch-

AND

amdryzen_7_3700xMatch-

Node

amdryzen_7_3800x_firmwareMatch-

AND

amdryzen_7_3800xMatch-

Node

amdryzen_7_5800h_firmwareMatch-

AND

amdryzen_7_5800hMatch-

Node

amdryzen_7_5800hs_firmwareMatch-

AND

amdryzen_7_5800hsMatch-

Node

amdryzen_7_5800u_firmwareMatch-

AND

amdryzen_7_5800uMatch-

Node

amdryzen_7_5825c_firmwareMatch-

AND

amdryzen_7_5825cMatch-

Node

amdryzen_7_5825u_firmwareMatch-

AND

amdryzen_7_5825uMatch-

Node

amdryzen_9_3900x_firmwareMatch-

AND

amdryzen_9_3900xMatch-

Node

amdryzen_9_3950x_firmwareMatch-

AND

amdryzen_9_3950xMatch-

Node

amdryzen_9_5900hs_firmwareMatch-

AND

amdryzen_9_5900hsMatch-

Node

amdryzen_9_5900hx_firmwareMatch-

AND

amdryzen_9_5900hxMatch-

Node

amdryzen_9_5980hs_firmwareMatch-

AND

amdryzen_9_5980hsMatch-

Node

amdryzen_9_5980hx_firmwareMatch-

AND

amdryzen_9_5980hxMatch-

Node

amdryzen_threadripper_2920x_firmwareMatch-

AND

amdryzen_threadripper_2920xMatch-

Node

amdryzen_threadripper_2950x_firmwareMatch-

AND

amdryzen_threadripper_2950xMatch-

Node

amdryzen_threadripper_2970wx_firmwareMatch-

AND

amdryzen_threadripper_2970wxMatch-

Node

amdryzen_threadripper_2990wx_firmwareMatch-

AND

amdryzen_threadripper_2990wxMatch-

VendorProductVersionCPE
amdradeon_software-cpe:2.3:a:amd:radeon_software:-:*:*:*:*:*:*:*
amdathlon_3050ge_firmware-cpe:2.3:o:amd:athlon_3050ge_firmware:-:*:*:*:*:*:*:*
amdathlon_3050ge-cpe:2.3:h:amd:athlon_3050ge:-:*:*:*:*:*:*:*
amdathlon_3150g_firmware-cpe:2.3:o:amd:athlon_3150g_firmware:-:*:*:*:*:*:*:*
amdathlon_3150g-cpe:2.3:h:amd:athlon_3150g:-:*:*:*:*:*:*:*
amdathlon_3150ge_firmware-cpe:2.3:o:amd:athlon_3150ge_firmware:-:*:*:*:*:*:*:*
amdathlon_3150ge-cpe:2.3:h:amd:athlon_3150ge:-:*:*:*:*:*:*:*
amdryzen_3_2200u_firmware-cpe:2.3:o:amd:ryzen_3_2200u_firmware:-:*:*:*:*:*:*:*
amdryzen_3_2200u-cpe:2.3:h:amd:ryzen_3_2200u:-:*:*:*:*:*:*:*
amdryzen_3_2300u_firmware-cpe:2.3:o:amd:ryzen_3_2300u_firmware:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
amd	radeon_software	-	cpe:2.3:a:amd:radeon_software:-:::::::*
amd	athlon_3050ge_firmware	-	cpe:2.3:o:amd:athlon_3050ge_firmware:-:::::::*
amd	athlon_3050ge	-	cpe:2.3:h:amd:athlon_3050ge:-:::::::*
amd	athlon_3150g_firmware	-	cpe:2.3:o:amd:athlon_3150g_firmware:-:::::::*
amd	athlon_3150g	-	cpe:2.3:h:amd:athlon_3150g:-:::::::*
amd	athlon_3150ge_firmware	-	cpe:2.3:o:amd:athlon_3150ge_firmware:-:::::::*
amd	athlon_3150ge	-	cpe:2.3:h:amd:athlon_3150ge:-:::::::*
amd	ryzen_3_2200u_firmware	-	cpe:2.3:o:amd:ryzen_3_2200u_firmware:-:::::::*
amd	ryzen_3_2200u	-	cpe:2.3:h:amd:ryzen_3_2200u:-:::::::*
amd	ryzen_3_2300u_firmware	-	cpe:2.3:o:amd:ryzen_3_2300u_firmware:-:::::::*

Rows per page:

1-10 of 991

CNA Affected

[
  {
    "product": "Ryzen™ Series",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "product": "Athlon™ Series",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

References

www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

Social References

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2021-26369