PT-2022-9754 · Amd · Athlon™ Series+30

Published 2022-05-10 · Updated 2022-05-25 · CVE-2021-26390

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory, potentially leading to loss of integrity of data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-26390

Affected Products

Athlon™ Series

Ryzen™ Series

Athlon 300U Firmware

Ryzen 3 3200U Firmware

Ryzen 3 3300X Firmware

Ryzen 3 5300G Firmware

Ryzen 5 2600H Firmware

Ryzen 5 2700 Firmware

Ryzen 5 3500 Firmware

Ryzen 5 3550H Firmware

Ryzen 5 3600X Firmware

Ryzen 5 5600X Firmware

Ryzen 7 3700X Firmware

Ryzen 7 3750H Firmware

Ryzen 7 3800X Firmware

Ryzen 7 5700G Firmware

Ryzen 7 5800U Firmware

Ryzen 9 3900X Firmware

Ryzen 9 3950X Firmware

Ryzen 9 5900Hx Firmware

Ryzen 9 5950X Firmware

Ryzen Threadripper 2920X Firmware

Ryzen Threadripper 2950X Firmware

Ryzen Threadripper 2970Wx Firmware

Ryzen Threadripper 2990Wx Firmware

Ryzen Threadripper 3970X Firmware

Ryzen Threadripper Pro 5945Wx Firmware

Ryzen Threadripper Pro 5955Wx Firmware

Ryzen Threadripper Pro 5965Wx Firmware

Ryzen Threadripper Pro 5975Wx Firmware

Ryzen Threadripper Pro 5995Wx Firmware

References · 3

• https://amd.com/en/corporate/product-security/bulletin/amd-sb-1027 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-26390 · Security Note
• https://t.me/cvenotify/30732 · Telegram Post