What’s Vulnerable › Vulnerabilities

CVE-2021-26390

• Severity: medium (CVSS 6.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-05-10 · updated 2026-06-17

Description

A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to loss of integrity of data.

Affected products

• AMD Athlon 300U Firmware: all versions
• AMD Ryzen 3 3200U Firmware: all versions
• AMD Ryzen 3 3300U Firmware: all versions
• AMD Ryzen 3 5300G Firmware: all versions
• AMD Ryzen 3 5300Ge Firmware: all versions
• AMD Ryzen 5 2600 Firmware: all versions
• AMD Ryzen 5 2600X Firmware: all versions
• AMD Ryzen 5 2700 Firmware: all versions
• AMD Ryzen 5 2700X Firmware: all versions
• AMD Ryzen 5 3500U Firmware: all versions
• AMD Ryzen 5 3550H Firmware: all versions
• AMD Ryzen 5 3600 Firmware: all versions
• AMD Ryzen 5 3600X Firmware: all versions
• AMD Ryzen 5 5600G Firmware: all versions
• AMD Ryzen 5 5600Ge Firmware: all versions
• AMD Ryzen 5 5600X Firmware: all versions
• AMD Ryzen 7 3700U Firmware: all versions
• AMD Ryzen 7 3700X Firmware: all versions
• AMD Ryzen 7 3750H Firmware: all versions
• AMD Ryzen 7 3800X Firmware: all versions
• AMD Ryzen 7 5700G Firmware: all versions
• AMD Ryzen 7 5700Ge Firmware: all versions
• AMD Ryzen 7 5800X Firmware: all versions
• AMD Ryzen 9 3900X Firmware: all versions
• AMD Ryzen 9 3950X Firmware: all versions
• AMD Ryzen 9 5900X Firmware: all versions
• AMD Ryzen 9 5950X Firmware: all versions
• AMD Ryzen Threadripper 2920X Firmware: all versions
• AMD Ryzen Threadripper 2950X Firmware: all versions
• AMD Ryzen Threadripper 2970Wx Firmware: all versions

References

• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

Get alerted when CVE-2021-26390 or the next vulnerability affects your stack