CVE-2021-26346

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-01-11 · updated 2026-06-17
Weakness: CWE-190

Description

Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.

Affected products

AMD Ryzen 3 3100 Firmware: all versions
AMD Ryzen 3 3200G Firmware: all versions
AMD Ryzen 3 3200U Firmware: all versions
AMD Ryzen 3 3250C Firmware: all versions
AMD Ryzen 3 3250U Firmware: all versions
AMD Ryzen 3 3300G Firmware: all versions
AMD Ryzen 3 3300U Firmware: all versions
AMD Ryzen 3 3300X Firmware: all versions
AMD Ryzen 3 3350U Firmware: all versions
AMD Ryzen 3 3450U Firmware: all versions
AMD Ryzen 3 3500C Firmware: all versions
AMD Ryzen 3 3500U Firmware: all versions
AMD Ryzen 3 3550H Firmware: all versions
AMD Ryzen 3 3580U Firmware: all versions
AMD Ryzen 3 3700C Firmware: all versions
AMD Ryzen 3 3700U Firmware: all versions
AMD Ryzen 3 3750H Firmware: all versions
AMD Ryzen 3 3780U Firmware: all versions
AMD Ryzen 3 5125C Firmware: all versions
AMD Ryzen 3 5300G Firmware: all versions
AMD Ryzen 3 5300Ge Firmware: all versions
AMD Ryzen 3 5300U Firmware: all versions
AMD Ryzen 3 5400U Firmware: all versions
AMD Ryzen 3 5425C Firmware: all versions
AMD Ryzen 3 5425U Firmware: all versions
AMD Ryzen 3 Pro 3200G Firmware: all versions
AMD Ryzen 3 Pro 3200Ge Firmware: all versions
AMD Ryzen 3 Pro 3300U Firmware: all versions
AMD Ryzen 5 3400G Firmware: all versions
AMD Ryzen 5 3450G Firmware: all versions

References

Get alerted when CVE-2021-26346 or the next vulnerability affects your stack