CVSS 3.1
8.2 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:HCVE-2021-26365
High (8.2) in amd. EPSS 0.6% chance of exploitation in the next 30 days.
Certain size values in firmware binary headers
could trigger out of bounds reads during signature validation, leading to
denial of service or potentially limited leakage of information about
out-of-bounds memory contents.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
- CWE
- CWE-125
- Published
- Modified
- Record from
- the NVD, synced
Affected
- amd:amd_3015ce_firmware
- amd:amd_3015e_firmware
- amd:ryzen_3_2200g_firmware
- amd:ryzen_3_2200ge_firmware
- amd:ryzen_3_2200u_firmware
- amd:ryzen_3_2300u_firmware
- amd:ryzen_3_3200g_firmware
- amd:ryzen_3_3200ge_firmware
- amd:ryzen_3_3200u_firmware
- amd:ryzen_3_3250c_firmware
- amd:ryzen_3_3250u_firmware
- amd:ryzen_3_5300g_firmware
- amd:ryzen_3_5300ge_firmware
- amd:ryzen_3_5300u_firmware
- amd:ryzen_3_pro_2100ge_firmware
- amd:ryzen_3_pro_3200g_firmware
- amd:ryzen_3_pro_3200ge_firmware
- amd:ryzen_5_2400g_firmware
- amd:ryzen_5_2400ge_firmware
- amd:ryzen_5_2500u_firmware
- amd:ryzen_5_2600h_firmware
- amd:ryzen_5_3400g_firmware
- amd:ryzen_5_5500_firmware
- amd:ryzen_5_5500u_firmware
- amd:ryzen_5_5600_firmware
- amd:ryzen_5_5600g_firmware
- amd:ryzen_5_5600ge_firmware
- amd:ryzen_5_5600x_firmware
- amd:ryzen_5_6600h_firmware
- amd:ryzen_5_6600hs_firmware
- amd:ryzen_5_6600u_firmware
- amd:ryzen_5_pro_3350g_firmware
- amd:ryzen_5_pro_3350ge_firmware
- amd:ryzen_5_pro_3400g_firmware
- amd:ryzen_5_pro_3400ge_firmware
- amd:ryzen_7_2700u_firmware
- amd:ryzen_7_2800h_firmware
- amd:ryzen_7_5700g_firmware
- amd:ryzen_7_5700ge_firmware
- amd:ryzen_7_5700u_firmware
- amd:ryzen_7_5700x_firmware
- amd:ryzen_7_5800_firmware
- amd:ryzen_7_5800x3d_firmware
- amd:ryzen_7_5800x_firmware
- amd:ryzen_7_6800h_firmware
- amd:ryzen_7_6800hs_firmware
- amd:ryzen_7_6800u_firmware
- amd:ryzen_9_5900_firmware
- amd:ryzen_9_5900x_firmware
- amd:ryzen_9_5950x_firmware