CVE-2021-26369: Buffer Overflow
First published: Tue May 10 2022(Updated: )
A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses.
Credit: psirt@amd.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| AMD Radeon Software | ||
| AMD Athlon 3050GE Firmware | ||
| AMD Athlon 3050GE | ||
| AMD athlon 3150g firmware | ||
| AMD Athlon Gold Pro 3150G | ||
| AMD Athlon Gold Pro 3150GE Firmware | ||
| AMD Athlon 3150GE | ||
| AMD Ryzen 3 2200U Firmware | ||
| AMD Ryzen 3 2200U Firmware | ||
| AMD Ryzen 3 2300U Firmware | ||
| AMD Ryzen 3 2300U | ||
| AMD Ryzen 3 3100 Firmware | ||
| AMD Ryzen 3 3100 Firmware | ||
| AMD Ryzen 3 3300G Firmware | ||
| AMD Ryzen 3 3300G Firmware | ||
| AMD Ryzen 3 3300X Firmware | ||
| AMD Ryzen 3 3300X Firmware | ||
| AMD Ryzen 3 5125C Firmware | ||
| AMD Ryzen 3 5125C | ||
| AMD Ryzen 3 5400U Firmware | ||
| AMD Ryzen 3 5400U | ||
| amd ryzen 3 5425c firmware | ||
| amd ryzen 3 5425c | ||
| AMD Ryzen 3 5425U | ||
| AMD Ryzen 3 5425U | ||
| AMD Ryzen 5 2500U Firmware | ||
| AMD Ryzen 5 2500U | ||
| AMD Ryzen 5 2600X | ||
| AMD Ryzen 5 2600 | ||
| AMD Ryzen 5 2600H Firmware | ||
| AMD Ryzen 5 2600H | ||
| AMD Ryzen 5 2600X | ||
| AMD Ryzen 5 2600X | ||
| AMD Ryzen 5 Pro 3400G Firmware | ||
| AMD Ryzen 5 Pro 3400G | ||
| AMD Ryzen 5 3450G Firmware | ||
| AMD Ryzen 5 3450G Firmware | ||
| AMD Ryzen 5 3600 firmware | ||
| AMD Ryzen 5 3600 | ||
| AMD Ryzen 5 3600X Firmware | ||
| AMD Ryzen 5 3600X Firmware | ||
| AMD Ryzen 5 5600H Firmware | ||
| AMD Ryzen 5 5600H | ||
| AMD Ryzen 5 5600HS Firmware | ||
| AMD Ryzen 5 5600HS | ||
| AMD Ryzen 5 5600U Firmware | ||
| AMD Ryzen 5 5600U | ||
| AMD Ryzen 5 5600X Firmware | ||
| AMD Ryzen 5 5600X Firmware | ||
| amd ryzen 5 5625c firmware | ||
| amd ryzen 5 5625c | ||
| AMD Ryzen 5 5625U Firmware | ||
| AMD Ryzen 5 5625U Firmware | ||
| AMD Ryzen 5 5700G Firmware | ||
| AMD Ryzen 5 5700G | ||
| AMD Ryzen 5 5700GE Firmware | ||
| AMD Ryzen 5 5700GE | ||
| AMD Ryzen 7 2700 Firmware | ||
| AMD Ryzen 7 2700 Firmware | ||
| AMD Ryzen 7 2700U Firmware | ||
| AMD Ryzen 7 2700U Firmware | ||
| AMD Ryzen 7 2700X | ||
| AMD Ryzen 7 2700X | ||
| AMD Ryzen 7 2800H Firmware | ||
| AMD Ryzen 7 2800H Firmware | ||
| AMD Ryzen 7 3700X Firmware | ||
| AMD Ryzen 7 3700X Firmware | ||
| AMD Ryzen 7 3800XT Firmware | ||
| AMD Ryzen 7 3800X | ||
| AMD Ryzen 7 5800H Firmware | ||
| AMD Ryzen 7 5800H Firmware | ||
| AMD Ryzen 7 5800HS Firmware | ||
| AMD Ryzen 7 5800HS Firmware | ||
| AMD Ryzen 7 5800U Firmware | ||
| AMD Ryzen 7 5800U Firmware | ||
| amd ryzen 7 5825c firmware | ||
| amd ryzen 7 5825c | ||
| AMD Ryzen 7 5825U Firmware | ||
| AMD Ryzen 7 5825U Firmware | ||
| AMD Ryzen 9 3900X | ||
| AMD Ryzen 9 3900X | ||
| AMD Ryzen 9 3950x firmware | ||
| AMD Ryzen 9 3950x firmware | ||
| AMD Ryzen 9 5900HS Firmware | ||
| AMD Ryzen 9 5900HS Firmware | ||
| AMD Ryzen 9 5900HX Firmware | ||
| AMD Ryzen 9 5900HX | ||
| AMD Ryzen 9 5980HS Firmware | ||
| AMD Ryzen 9 5980HS Firmware | ||
| AMD Ryzen 9 5980HX | ||
| AMD Ryzen 9 5980HX Firmware | ||
| AMD Ryzen Threadripper 2920X Firmware | ||
| AMD Ryzen Threadripper 2920X Firmware | ||
| AMD Ryzen Threadripper 2950X Firmware | ||
| AMD Ryzen Threadripper 2950X Firmware | ||
| AMD Ryzen Threadripper 2970WX Firmware | ||
| AMD Ryzen Threadripper 2970WX Firmware | ||
| AMD Ryzen Threadripper 2990WX | ||
| AMD Ryzen Threadripper 2990WX |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2021-26369?
CVE-2021-26369 is classified as a high-severity vulnerability due to potential out-of-bounds memory access.
How do I fix CVE-2021-26369?
To mitigate CVE-2021-26369, users should apply the latest firmware updates provided by AMD.
What products are affected by CVE-2021-26369?
CVE-2021-26369 affects various AMD firmware products including AMD Radeon Software, Athlon, and Ryzen firmware.
What type of attack does CVE-2021-26369 enable?
CVE-2021-26369 could allow an attacker to execute arbitrary code through malformed system calls to the bootloader.
Is CVE-2021-26369 being actively exploited?
As of the last update, there was no confirmed active exploitation of CVE-2021-26369 in the wild.
- agent/type
- agent/severity
- agent/author
- agent/references
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/amd
- canonical/amd radeon software
- canonical/amd athlon 3050ge firmware
- canonical/amd athlon 3050ge
- canonical/amd athlon 3150g firmware
- canonical/amd athlon gold pro 3150g
- canonical/amd athlon gold pro 3150ge firmware
- canonical/amd athlon 3150ge
- canonical/amd ryzen 3 2200u firmware
- canonical/amd ryzen 3 2300u firmware
- canonical/amd ryzen 3 2300u
- canonical/amd ryzen 3 3100 firmware
- canonical/amd ryzen 3 3300g firmware
- canonical/amd ryzen 3 3300x firmware
- canonical/amd ryzen 3 5125c firmware
- canonical/amd ryzen 3 5125c
- canonical/amd ryzen 3 5400u firmware
- canonical/amd ryzen 3 5400u
- canonical/amd ryzen 3 5425c firmware
- canonical/amd ryzen 3 5425c
- canonical/amd ryzen 3 5425u
- canonical/amd ryzen 5 2500u firmware
- canonical/amd ryzen 5 2500u
- canonical/amd ryzen 5 2600x
- canonical/amd ryzen 5 2600
- canonical/amd ryzen 5 2600h firmware
- canonical/amd ryzen 5 2600h
- canonical/amd ryzen 5 pro 3400g firmware
- canonical/amd ryzen 5 pro 3400g
- canonical/amd ryzen 5 3450g firmware
- canonical/amd ryzen 5 3600 firmware
- canonical/amd ryzen 5 3600
- canonical/amd ryzen 5 3600x firmware
- canonical/amd ryzen 5 5600h firmware
- canonical/amd ryzen 5 5600h
- canonical/amd ryzen 5 5600hs firmware
- canonical/amd ryzen 5 5600hs
- canonical/amd ryzen 5 5600u firmware
- canonical/amd ryzen 5 5600u
- canonical/amd ryzen 5 5600x firmware
- canonical/amd ryzen 5 5625c firmware
- canonical/amd ryzen 5 5625c
- canonical/amd ryzen 5 5625u firmware
- canonical/amd ryzen 5 5700g firmware
- canonical/amd ryzen 5 5700g
- canonical/amd ryzen 5 5700ge firmware
- canonical/amd ryzen 5 5700ge
- canonical/amd ryzen 7 2700 firmware
- canonical/amd ryzen 7 2700u firmware
- canonical/amd ryzen 7 2700x
- canonical/amd ryzen 7 2800h firmware
- canonical/amd ryzen 7 3700x firmware
- canonical/amd ryzen 7 3800xt firmware
- canonical/amd ryzen 7 3800x
- canonical/amd ryzen 7 5800h firmware
- canonical/amd ryzen 7 5800hs firmware
- canonical/amd ryzen 7 5800u firmware
- canonical/amd ryzen 7 5825c firmware
- canonical/amd ryzen 7 5825c
- canonical/amd ryzen 7 5825u firmware
- canonical/amd ryzen 9 3900x
- canonical/amd ryzen 9 3950x firmware
- canonical/amd ryzen 9 5900hs firmware
- canonical/amd ryzen 9 5900hx firmware
- canonical/amd ryzen 9 5900hx
- canonical/amd ryzen 9 5980hs firmware
- canonical/amd ryzen 9 5980hx
- canonical/amd ryzen 9 5980hx firmware
- canonical/amd ryzen threadripper 2920x firmware
- canonical/amd ryzen threadripper 2950x firmware
- canonical/amd ryzen threadripper 2970wx firmware
- canonical/amd ryzen threadripper 2990wx