High severity · published May 9, 2023
CVE-2021-26365
Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of…
8.2
CVSS
0.6%
EPSS
No
On KEV
Description
Certain size values in firmware binary headers
could trigger out of bounds reads during signature validation, leading to
denial of service or potentially limited leakage of information about
out-of-bounds memory contents.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 47% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
A3
Amd 3015ce Firmware · Amd
before pollockpi-ft5_1.0.0.3 · source: NVD
A3
Amd 3015e Firmware · Amd
before pollockpi-ft5_1.0.0.3 · source: NVD
R3
Ryzen 3 2200g Firmware · Amd
All versions, or not specified · source: NVD
R3
Ryzen 3 2200ge Firmware · Amd
All versions, or not specified · source: NVD
R3
Ryzen 3 2200u Firmware · Amd
All versions, or not specified · source: NVD
R3
Ryzen 3 2300u Firmware · Amd
All versions, or not specified · source: NVD
R3
Ryzen 3 3200g Firmware · Amd
All versions, or not specified · source: NVD
R3
Ryzen 3 3200ge Firmware · Amd
All versions, or not specified · source: NVD
R3
Ryzen 3 3200u Firmware · Amd
before picassopi-fp5_1.0.0.d · source: NVD
R3
Ryzen 3 3250c Firmware · Amd
before picassopi-fp5_1.0.0.d · source: NVD
R3
Ryzen 3 3250u Firmware · Amd
before picassopi-fp5_1.0.0.d · source: NVD
R3
Ryzen 3 5300g Firmware · Amd
before cezannepi-fp6_1.0.0.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-26365
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-26365
Vendor Advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
More from Amd 3015ce Firmware
5.5
CVE-2021-26393
Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA…