Lucene search

AMDCVE-2021-26386

HistoryMay 12, 2022 - 7:15 p.m.

CVE-2021-26386

2022-05-1219:15:48

CWE-787

AMD

web.nvd.nist.gov

cve-2021-26386

uapp

abl

attacker

system call

memory corruption

code execution

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

Percentile

12.6%

JSON

A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially leading to corrupt memory and code execution.

Affected configurations

Nvd

Node

amdryzen_3_2200u_firmwareMatch-

AND

amdryzen_3_2200uMatch-

Node

amdryzen_3_2300u_firmwareMatch-

AND

amdryzen_3_2300uMatch-

Node

amdryzen_3_3100_firmwareMatch-

AND

amdryzen_3_3100Match-

Node

amdryzen_3_3300g_firmwareMatch-

AND

amdryzen_3_3300gMatch-

Node

amdryzen_3_3300x_firmwareMatch-

AND

amdryzen_3_3300xMatch-

Node

amdryzen_3_5125c_firmwareMatch-

AND

amdryzen_3_5125cMatch-

Node

amdryzen_3_5400u_firmwareMatch-

AND

amdryzen_3_5400uMatch-

Node

amdryzen_3_5425c_firmwareMatch-

AND

amdryzen_3_5425cMatch-

Node

amdryzen_3_5425u_firmwareMatch-

AND

amdryzen_3_5425uMatch-

Node

amdryzen_5300g_firmwareMatch-

AND

amdryzen_5300gMatch-

Node

amdryzen_5300ge_firmwareMatch-

AND

amdryzen_5300geMatch-

Node

amdryzen_5600g_firmwareMatch-

AND

amdryzen_5600gMatch-

Node

amdryzen_5600ge_firmwareMatch-

AND

amdryzen_5600geMatch-

Node

amdryzen_5600x_firmwareMatch-

AND

amdryzen_5600xMatch-

Node

amdryzen_5700g_firmwareMatch-

AND

amdryzen_5700gMatch-

Node

amdryzen_5700ge_firmwareMatch-

AND

amdryzen_5700geMatch-

Node

amdryzen_5800x_firmwareMatch-

AND

amdryzen_5800xMatch-

Node

amdryzen_5800x3d_firmwareMatch-

AND

amdryzen_5800x3dMatch-

Node

amdryzen_5900x_firmwareMatch-

AND

amdryzen_5900xMatch-

Node

amdryzen_5950x_firmwareMatch-

AND

amdryzen_5950xMatch-

Node

amdryzen_5_2500u_firmwareMatch-

AND

amdryzen_5_2500uMatch-

Node

amdryzen_5_2600_firmwareMatch-

AND

amdryzen_5_2600Match-

Node

amdryzen_5_2600h_firmwareMatch-

AND

amdryzen_5_2600hMatch-

Node

amdryzen_5_2600x_firmwareMatch-

AND

amdryzen_5_2600xMatch-

Node

amdryzen_5_3400g_firmwareMatch-

AND

amdryzen_5_3400gMatch-

Node

amdryzen_5_3450g_firmwareMatch-

AND

amdryzen_5_3450gMatch-

Node

amdryzen_5_3600_firmwareMatch-

AND

amdryzen_5_3600Match-

Node

amdryzen_5_3600x_firmwareMatch-

AND

amdryzen_5_3600xMatch-

Node

amdryzen_5_5560u_firmwareMatch-

AND

amdryzen_5_5560uMatch-

Node

amdryzen_5_5600h_firmwareMatch-

AND

amdryzen_5_5600hMatch-

Node

amdryzen_5_5600hs_firmwareMatch-

AND

amdryzen_5_5600hsMatch-

Node

amdryzen_5_5600u_firmwareMatch-

AND

amdryzen_5_5600uMatch-

Node

amdryzen_5_5600x_firmwareMatch-

AND

amdryzen_5_5600xMatch-

Node

amdryzen_5_5625c_firmwareMatch-

AND

amdryzen_5_5625cMatch-

Node

amdryzen_5_5625u_firmwareMatch-

AND

amdryzen_5_5625uMatch-

Node

amdryzen_5_5700g_firmwareMatch-

AND

amdryzen_5_5700gMatch-

Node

amdryzen_5_5700ge_firmwareMatch-

AND

amdryzen_5_5700geMatch-

Node

amdryzen_7_2700_firmwareMatch-

AND

amdryzen_7_2700Match-

Node

amdryzen_7_2700u_firmwareMatch-

AND

amdryzen_7_2700uMatch-

Node

amdryzen_7_2700x_firmwareMatch-

AND

amdryzen_7_2700xMatch-

Node

amdryzen_7_2800h_firmwareMatch-

AND

amdryzen_7_2800hMatch-

Node

amdryzen_7_3700x_firmwareMatch-

AND

amdryzen_7_3700xMatch-

Node

amdryzen_7_3800x_firmwareMatch-

AND

amdryzen_7_3800xMatch-

Node

amdryzen_7_5800h_firmwareMatch-

AND

amdryzen_7_5800hMatch-

Node

amdryzen_7_5800hs_firmwareMatch-

AND

amdryzen_7_5800hsMatch-

Node

amdryzen_7_5800u_firmwareMatch-

AND

amdryzen_7_5800uMatch-

Node

amdryzen_7_5825c_firmwareMatch-

AND

amdryzen_7_5825cMatch-

Node

amdryzen_7_5825u_firmwareMatch-

AND

amdryzen_7_5825uMatch-

Node

amdryzen_9_3900x_firmwareMatch-

AND

amdryzen_9_3900xMatch-

Node

amdryzen_9_3950x_firmwareMatch-

AND

amdryzen_9_3950xMatch-

Node

amdryzen_9_5900hs_firmwareMatch-

AND

amdryzen_9_5900hsMatch-

Node

amdryzen_9_5900hx_firmwareMatch-

AND

amdryzen_9_5900hxMatch-

Node

amdryzen_9_5980hs_firmwareMatch-

AND

amdryzen_9_5980hsMatch-

Node

amdryzen_9_5980hx_firmwareMatch-

AND

amdryzen_9_5980hxMatch-

Node

amdryzen_threadripper_2920x_firmwareMatch-

AND

amdryzen_threadripper_2920xMatch-

Node

amdryzen_threadripper_2950x_firmwareMatch-

AND

amdryzen_threadripper_2950xMatch-

Node

amdryzen_threadripper_2970wx_firmwareMatch-

AND

amdryzen_threadripper_2970wxMatch-

Node

amdryzen_threadripper_2990wx_firmwareMatch-

AND

amdryzen_threadripper_2990wxMatch-

Node

amdryzen_threadripper_3960x_firmwareMatch-

AND

amdryzen_threadripper_3960xMatch-

Node

amdryzen_threadripper_3970x_firmwareMatch-

AND

amdryzen_threadripper_3970xMatch-

Node

amdryzen_threadripper_3990x_firmwareMatch-

AND

amdryzen_threadripper_3990xMatch-

Node

amdryzen_threadripper_pro_3945wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3945wxMatch-

Node

amdryzen_threadripper_pro_3955wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3955wxMatch-

Node

amdryzen_threadripper_pro_3975wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3975wxMatch-

Node

amdryzen_threadripper_pro_3995wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3995wxMatch-

Node

amdryzen_threadripper_pro_5945wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5945wxMatch-

Node

amdryzen_threadripper_pro_5955wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5955wxMatch-

Node

amdryzen_threadripper_pro_5965wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5965wxMatch-

Node

amdryzen_threadripper_pro_5975wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5975wxMatch-

Node

amdryzen_threadripper_pro_5995wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5995wxMatch-

VendorProductVersionCPE
amdryzen_3_2200u_firmware-cpe:2.3:o:amd:ryzen_3_2200u_firmware:-:*:*:*:*:*:*:*
amdryzen_3_2200u-cpe:2.3:h:amd:ryzen_3_2200u:-:*:*:*:*:*:*:*
amdryzen_3_2300u_firmware-cpe:2.3:o:amd:ryzen_3_2300u_firmware:-:*:*:*:*:*:*:*
amdryzen_3_2300u-cpe:2.3:h:amd:ryzen_3_2300u:-:*:*:*:*:*:*:*
amdryzen_3_3100_firmware-cpe:2.3:o:amd:ryzen_3_3100_firmware:-:*:*:*:*:*:*:*
amdryzen_3_3100-cpe:2.3:h:amd:ryzen_3_3100:-:*:*:*:*:*:*:*
amdryzen_3_3300g_firmware-cpe:2.3:o:amd:ryzen_3_3300g_firmware:-:*:*:*:*:*:*:*
amdryzen_3_3300g-cpe:2.3:h:amd:ryzen_3_3300g:-:*:*:*:*:*:*:*
amdryzen_3_3300x_firmware-cpe:2.3:o:amd:ryzen_3_3300x_firmware:-:*:*:*:*:*:*:*
amdryzen_3_3300x-cpe:2.3:h:amd:ryzen_3_3300x:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
amd	ryzen_3_2200u_firmware	-	cpe:2.3:o:amd:ryzen_3_2200u_firmware:-:::::::*
amd	ryzen_3_2200u	-	cpe:2.3:h:amd:ryzen_3_2200u:-:::::::*
amd	ryzen_3_2300u_firmware	-	cpe:2.3:o:amd:ryzen_3_2300u_firmware:-:::::::*
amd	ryzen_3_2300u	-	cpe:2.3:h:amd:ryzen_3_2300u:-:::::::*
amd	ryzen_3_3100_firmware	-	cpe:2.3:o:amd:ryzen_3_3100_firmware:-:::::::*
amd	ryzen_3_3100	-	cpe:2.3:h:amd:ryzen_3_3100:-:::::::*
amd	ryzen_3_3300g_firmware	-	cpe:2.3:o:amd:ryzen_3_3300g_firmware:-:::::::*
amd	ryzen_3_3300g	-	cpe:2.3:h:amd:ryzen_3_3300g:-:::::::*
amd	ryzen_3_3300x_firmware	-	cpe:2.3:o:amd:ryzen_3_3300x_firmware:-:::::::*
amd	ryzen_3_3300x	-	cpe:2.3:h:amd:ryzen_3_3300x:-:::::::*

Rows per page:

1-10 of 1401

CNA Affected

[
  {
    "product": "Ryzen™ Series",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "product": "Athlon™ Series",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

References

www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

Social References

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2021-26386