CVE-2021-26352: Buffer Overflow
Published May 10, 2022
·Updated
Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service.
Affected Software
60 affected components
AMD Ryzen 5 2600 Firmware
AMD Ryzen 5 2600
AMD Ryzen 5 2600x Firmware
AMD Ryzen 5 2600x
AMD Ryzen 5 2700x Firmware
AMD Ryzen 5 2700x
AMD Ryzen 5 2700 Firmware
AMD Ryzen 5 2700
AMD Ryzen 5 3600 Firmware
AMD Ryzen 5 3600
AMD Ryzen 5 3600x Firmware
AMD Ryzen 5 3600x
AMD Ryzen 7 3700x Firmware
AMD Ryzen 7 3700x
AMD Ryzen 7 3800x Firmware
AMD Ryzen 7 3800x
AMD Ryzen 9 3900x Firmware
AMD Ryzen 9 3900x
AMD Ryzen 9 3950x Firmware
AMD Ryzen 9 3950x
AMD Ryzen 9 5950x Firmware
AMD Ryzen 9 5950x
AMD Ryzen 9 5900x Firmware
AMD Ryzen 9 5900x
AMD Ryzen 7 5800x Firmware
AMD Ryzen 7 5800x
AMD Ryzen 7 5700g Firmware
AMD Ryzen 7 5700g
AMD Ryzen 7 5700ge Firmware
AMD Ryzen 7 5700ge
AMD Ryzen 5 5600g Firmware
AMD Ryzen 5 5600g
AMD Ryzen 5 5600x Firmware
AMD Ryzen 5 5600x
AMD Ryzen 5 5600ge Firmware
AMD Ryzen 5 5600ge
AMD Ryzen 3 5300g Firmware
AMD Ryzen 3 5300g
AMD Ryzen 3 5300ge Firmware
AMD Ryzen 3 5300ge
AMD Ryzen Threadripper 2990wx Firmware
AMD Ryzen Threadripper 2990wx
AMD Ryzen Threadripper 2970wx Firmware
AMD Ryzen Threadripper 2970wx
AMD Ryzen Threadripper 2950x Firmware
AMD Ryzen Threadripper 2950x
AMD Ryzen Threadripper 2920x Firmware
AMD Ryzen Threadripper 2920x
AMD Ryzen Threadripper 3970x Firmware
AMD Ryzen Threadripper 3970x
AMD Ryzen Threadripper Pro 5995wx Firmware
AMD Ryzen Threadripper Pro 5995wx
AMD Ryzen Threadripper Pro 5975wx Firmware
AMD Ryzen Threadripper Pro 5975wx
AMD Ryzen Threadripper Pro 5965wx Firmware
AMD Ryzen Threadripper Pro 5965wx
AMD Ryzen Threadripper Pro 5955wx Firmware
AMD Ryzen Threadripper Pro 5955wx
AMD Ryzen Threadripper Pro 5945wx Firmware
AMD Ryzen Threadripper Pro 5945wx
Event History
May 10, 2022
CVE Published
via MITRE·06:26 PM
Data Sourced
via MITRE·06:26 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-26352?
The severity of CVE-2021-26352 is medium with a severity value of 5.5.
2
How does CVE-2021-26352 affect AMD Ryzen 5 2600 Firmware?
CVE-2021-26352 affects AMD Ryzen 5 2600 Firmware and may result in denial of service due to insufficient bound checks in the System Management Unit (SMU) PCIe Hot Plug table.
3
Is AMD Ryzen 5 2600x vulnerable to CVE-2021-26352?
No, AMD Ryzen 5 2600x is not vulnerable to CVE-2021-26352.
4
What is the CWE ID of CVE-2021-26352?
The CWE ID of CVE-2021-26352 is 119.
5
How can I fix CVE-2021-26352?
To address CVE-2021-26352, it is recommended to apply the firmware update provided by AMD. Please refer to the AMD product security bulletin for more information.