PT-2022-9743 · Amd · Athlon™ Series+33

Published 2022-05-12 · Updated 2022-06-01 · CVE-2021-26369

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2021-26369

Affected Products

Athlon™ Series

Ryzen™ Series

Athlon 3050Ge Firmware

Athlon 3150Ge Firmware

Radeon

Ryzen 3 2200U Firmware

Ryzen 3 2300U Firmware

Ryzen 3 3100 Firmware

Ryzen 3 3300X Firmware

Ryzen 3 5125C Firmware

Ryzen 3 5400U Firmware

Ryzen 3 5425U Firmware

Ryzen 5 2500U Firmware

Ryzen 5 2600H Firmware

Ryzen 5 3400G Firmware

Ryzen 5 3450G Firmware

Ryzen 5 3600X Firmware

Ryzen 5 5600X Firmware

Ryzen 5 5625U Firmware

Ryzen 5 5700G Firmware

Ryzen 7 2700U Firmware

Ryzen 7 2800H Firmware

Ryzen 7 3700X Firmware

Ryzen 7 3800X Firmware

Ryzen 7 5800U Firmware

Ryzen 7 5825U Firmware

Ryzen 9 3900X Firmware

Ryzen 9 3950X Firmware

Ryzen 9 5900Hx Firmware

Ryzen 9 5980Hx Firmware

Ryzen Threadripper 2920X Firmware

Ryzen Threadripper 2950X Firmware

Ryzen Threadripper 2970Wx Firmware

Ryzen Threadripper 2990Wx Firmware

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-26369 · Security Note
• https://amd.com/en/corporate/product-security/bulletin/amd-sb-1027 · Vendor Advisory
• https://t.me/cibsecurity/42538 · Telegram Post