CVE-2021-26361

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-05-12 · updated 2026-06-17

Description

A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to information disclosure.

Affected products

AMD Athlon 3050Ge Firmware: all versions
AMD Athlon 3150G Firmware: all versions
AMD Athlon 3150Ge Firmware: all versions
AMD Radeon Software: all versions
AMD Ryzen 3 2200U Firmware: all versions
AMD Ryzen 3 2300U Firmware: all versions
AMD Ryzen 3 5125C Firmware: all versions
AMD Ryzen 3 5400U Firmware: all versions
AMD Ryzen 3 5425C Firmware: all versions
AMD Ryzen 3 5425U Firmware: all versions
AMD Ryzen 5 2500U Firmware: all versions
AMD Ryzen 5 2600 Firmware: all versions
AMD Ryzen 5 2600H Firmware: all versions
AMD Ryzen 5 2600X Firmware: all versions
AMD Ryzen 5 5560U Firmware: all versions
AMD Ryzen 5 5600H Firmware: all versions
AMD Ryzen 5 5600Hs Firmware: all versions
AMD Ryzen 5 5600U Firmware: all versions
AMD Ryzen 5 5600X Firmware: all versions
AMD Ryzen 5 5625C Firmware: all versions
AMD Ryzen 5 5625U Firmware: all versions
AMD Ryzen 5 5700G Firmware: all versions
AMD Ryzen 5 5700Ge Firmware: all versions
AMD Ryzen 7 2700 Firmware: all versions
AMD Ryzen 7 2700U Firmware: all versions
AMD Ryzen 7 2700X Firmware: all versions
AMD Ryzen 7 2800H Firmware: all versions
AMD Ryzen 7 5800H Firmware: all versions
AMD Ryzen 7 5800Hs Firmware: all versions
AMD Ryzen 7 5800U Firmware: all versions

References

Get alerted when CVE-2021-26361 or the next vulnerability affects your stack