CVE-2021-26390

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 10-05-2022 09:15

Last modified: - 25-05-2022 07:27

Total changes: - 4

Description

A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to loss of integrity of data.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Low

Attack complexity

Local

Attack vector

None

Availability

None

Confidentiality

High

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

6.2

Base score

2.5

3.6

Exploitability score

Impact score

Verification logic

AND

vendor=amd AND product=ryzen_5_2600_firmware AND version=-

vendor=amd AND product=ryzen_5_2600 AND version=-

AND

vendor=amd AND product=ryzen_5_2600x_firmware AND version=-

vendor=amd AND product=ryzen_5_2600x AND version=-

AND

vendor=amd AND product=ryzen_5_2700x_firmware AND version=-

vendor=amd AND product=ryzen_5_2700x AND version=-

AND

vendor=amd AND product=ryzen_5_2700_firmware AND version=-

vendor=amd AND product=ryzen_5_2700 AND version=-

AND

vendor=amd AND product=ryzen_5_3600_firmware AND version=-

vendor=amd AND product=ryzen_5_3600 AND version=-

AND

vendor=amd AND product=ryzen_5_3600x_firmware AND version=-

vendor=amd AND product=ryzen_5_3600x AND version=-

AND

vendor=amd AND product=ryzen_7_3700x_firmware AND version=-

vendor=amd AND product=ryzen_7_3700x AND version=-

AND

vendor=amd AND product=ryzen_7_3800x_firmware AND version=-

vendor=amd AND product=ryzen_7_3800x AND version=-

AND

vendor=amd AND product=ryzen_9_3900x_firmware AND version=-

vendor=amd AND product=ryzen_9_3900x AND version=-

AND

vendor=amd AND product=ryzen_9_3950x_firmware AND version=-

vendor=amd AND product=ryzen_9_3950x AND version=-

AND

vendor=amd AND product=ryzen_9_5950x_firmware AND version=-

vendor=amd AND product=ryzen_9_5950x AND version=-

AND

vendor=amd AND product=ryzen_9_5900x_firmware AND version=-

vendor=amd AND product=ryzen_9_5900x AND version=-

AND

vendor=amd AND product=ryzen_7_5800x_firmware AND version=-

vendor=amd AND product=ryzen_7_5800x AND version=-

AND

vendor=amd AND product=ryzen_7_5700g_firmware AND version=-

vendor=amd AND product=ryzen_7_5700g AND version=-

AND

vendor=amd AND product=ryzen_7_5700ge_firmware AND version=-

vendor=amd AND product=ryzen_7_5700ge AND version=-

AND

vendor=amd AND product=ryzen_5_5600g_firmware AND version=-

vendor=amd AND product=ryzen_5_5600g AND version=-

AND

vendor=amd AND product=ryzen_5_5600x_firmware AND version=-

vendor=amd AND product=ryzen_5_5600x AND version=-

AND

vendor=amd AND product=ryzen_5_5600ge_firmware AND version=-

vendor=amd AND product=ryzen_5_5600ge AND version=-

AND

vendor=amd AND product=ryzen_3_5300g_firmware AND version=-

vendor=amd AND product=ryzen_3_5300g AND version=-

AND

vendor=amd AND product=ryzen_3_5300ge_firmware AND version=-

vendor=amd AND product=ryzen_3_5300ge AND version=-

AND

vendor=amd AND product=ryzen_threadripper_2990wx_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_2990wx AND version=-

AND

vendor=amd AND product=ryzen_threadripper_2970wx_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_2970wx AND version=-

AND

vendor=amd AND product=ryzen_threadripper_2950x_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_2950x AND version=-

AND

vendor=amd AND product=ryzen_threadripper_2920x_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_2920x AND version=-

AND

vendor=amd AND product=ryzen_threadripper_3970x_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_3970x AND version=-

AND

vendor=amd AND product=ryzen_threadripper_pro_5995wx_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_pro_5995wx AND version=-

AND

vendor=amd AND product=ryzen_threadripper_pro_5975wx_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_pro_5975wx AND version=-

AND

vendor=amd AND product=ryzen_threadripper_pro_5965wx_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_pro_5965wx AND version=-

AND

vendor=amd AND product=ryzen_threadripper_pro_5955wx_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_pro_5955wx AND version=-

AND

vendor=amd AND product=ryzen_threadripper_pro_5945wx_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_pro_5945wx AND version=-

AND

vendor=amd AND product=ryzen_7_3750h_firmware AND version=-

vendor=amd AND product=ryzen_7_3750h AND version=-

AND

vendor=amd AND product=ryzen_7_3700u_firmware AND version=-

vendor=amd AND product=ryzen_7_3700u AND version=-

AND

vendor=amd AND product=ryzen_5_3550h_firmware AND version=-

vendor=amd AND product=ryzen_5_3550h AND version=-

AND

vendor=amd AND product=ryzen_5_3500u_firmware AND version=-

vendor=amd AND product=ryzen_5_3500u AND version=-

AND

vendor=amd AND product=ryzen_3_3300u_firmware AND version=-

vendor=amd AND product=ryzen_3_3300u AND version=-

AND

vendor=amd AND product=ryzen_3_3200u_firmware AND version=-

vendor=amd AND product=ryzen_3_3200u AND version=-

AND

vendor=amd AND product=athlon_300u_firmware AND version=-

vendor=amd AND product=athlon_300u AND version=-

Reference

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

Keywords

CVE-2021-26390

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-26390

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures