Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2021-26365

Certain size values in firmware binary headers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information about out-of-bounds memory contents.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4

Default version status: unaffected

  • various affected

AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4

Default version status: unaffected

  • various affected

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP

Default version status: unaffected

  • various affected

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”

Default version status: unaffected

  • various affected

AMD Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5

Default version status: unaffected

  • various affected

AMD Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”

Default version status: unaffected

  • various affected

AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir”

Default version status: unaffected

  • various affected

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”

Default version status: unaffected

  • various affected

AMD Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”

Default version status: unaffected

  • various affected

AMD Ryzen™ 6000 Series Mobile Processors "Rembrandt"

Default version status: unaffected

  • various affected

References