CVE-2021-26390

MEDIUM

AMD Ryzen Firmware - Arbitrary Memory Corruption via Bootloader Coercion

Title source: llm

A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to loss of integrity of data.

Core 1

Core References

Vendor Advisory x_refsource_misc

CVSS v3 6.2

EPSS 0.0013

EPSS Percentile 32.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Status published

Products (37)

amd/athlon_300u_firmware

amd/ryzen_3_3200u_firmware

amd/ryzen_3_3300u_firmware

amd/ryzen_3_5300g_firmware

amd/ryzen_3_5300ge_firmware

amd/ryzen_5_2600_firmware

amd/ryzen_5_2600x_firmware

amd/ryzen_5_2700_firmware

amd/ryzen_5_2700x_firmware

amd/ryzen_5_3500u_firmware

... and 27 more

Published May 10, 2022

Tracked Since Feb 18, 2026