PT-2022-9739 · Amd · Athlon™ Series+22

Published 2022-05-12 · Updated 2023-08-08 · CVE-2021-26363

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenced area, potentially leading to data exposure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-26363

Affected Products

Athlon™ Series

Ryzen™ Series

Radeon

Ryzen 3 3100 Firmware

Ryzen 3 3300X Firmware

Ryzen 3 5125C Firmware

Ryzen 3 5400U Firmware

Ryzen 3 5425U Firmware

Ryzen 5 3400G Firmware

Ryzen 5 3450G Firmware

Ryzen 5 3600X Firmware

Ryzen 5 5560U Firmware

Ryzen 5 5600X Firmware

Ryzen 5 5625U Firmware

Ryzen 5 5700G Firmware

Ryzen 7 3700X Firmware

Ryzen 7 3800X Firmware

Ryzen 7 5800U Firmware

Ryzen 7 5825U Firmware

Ryzen 9 3900X Firmware

Ryzen 9 3950X Firmware

Ryzen 9 5900Hx Firmware

Ryzen 9 5980Hx Firmware

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-26363 · Security Note
• https://amd.com/en/corporate/product-security/bulletin/amd-sb-1027 · Vendor Advisory
• https://t.me/cibsecurity/42539 · Telegram Post
• https://t.me/cvenotify/30961 · Telegram Post