What’s Vulnerable › Vulnerabilities

CVE-2021-26369

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-05-12 · updated 2026-06-17
• Weakness: CWE-119

Description

A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses.

Affected products

• AMD Athlon 3050Ge Firmware: all versions
• AMD Athlon 3150G Firmware: all versions
• AMD Athlon 3150Ge Firmware: all versions
• AMD Radeon Software: all versions
• AMD Ryzen 3 2200U Firmware: all versions
• AMD Ryzen 3 2300U Firmware: all versions
• AMD Ryzen 3 3100 Firmware: all versions
• AMD Ryzen 3 3300G Firmware: all versions
• AMD Ryzen 3 3300X Firmware: all versions
• AMD Ryzen 3 5125C Firmware: all versions
• AMD Ryzen 3 5400U Firmware: all versions
• AMD Ryzen 3 5425C Firmware: all versions
• AMD Ryzen 3 5425U Firmware: all versions
• AMD Ryzen 5 2500U Firmware: all versions
• AMD Ryzen 5 2600 Firmware: all versions
• AMD Ryzen 5 2600H Firmware: all versions
• AMD Ryzen 5 2600X Firmware: all versions
• AMD Ryzen 5 3400G Firmware: all versions
• AMD Ryzen 5 3450G Firmware: all versions
• AMD Ryzen 5 3600 Firmware: all versions
• AMD Ryzen 5 3600X Firmware: all versions
• AMD Ryzen 5 5600H Firmware: all versions
• AMD Ryzen 5 5600Hs Firmware: all versions
• AMD Ryzen 5 5600U Firmware: all versions
• AMD Ryzen 5 5600X Firmware: all versions
• AMD Ryzen 5 5625C Firmware: all versions
• AMD Ryzen 5 5625U Firmware: all versions
• AMD Ryzen 5 5700G Firmware: all versions
• AMD Ryzen 5 5700Ge Firmware: all versions
• AMD Ryzen 7 2700 Firmware: all versions

References

• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

Get alerted when CVE-2021-26369 or the next vulnerability affects your stack