CVE-2021-26384: High severity amd ryzen 7 5700g firmware vulnerability
Published Jul 14, 2022
·Updated
A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources.
Affected Software
104 affected components
AMD Ryzen 7 5700g Firmware<comboam4_v2_pi_1.2.0.6c
AMD Ryzen 7 5700g
AMD Ryzen 7 5700ge Firmware<comboam4_v2_pi_1.2.0.6c
AMD Ryzen 7 5700ge
AMD Ryzen 5 5600g Firmware<comboam4_v2_pi_1.2.0.6c
AMD Ryzen 5 5600g
AMD Ryzen 5 5600ge Firmware<comboam4_v2_pi_1.2.0.6c
AMD Ryzen 5 5600ge
AMD Ryzen 3 5300g Firmware<comboam4_v2_pi_1.2.0.6c
AMD Ryzen 3 5300g
AMD Ryzen 3 5300ge Firmware<comboam4_v2_pi_1.2.0.6c
AMD Ryzen 3 5300ge
AMD Ryzen 9 5980hx Firmware<cezannepi-fp6_1.0.0.9
AMD Ryzen 9 5980hx
AMD Ryzen 9 5980hs Firmware<cezannepi-fp6_1.0.0.9
AMD Ryzen 9 5980hs
AMD Ryzen 7 5825u Firmware<cezannepi-fp6_1.0.0.9
AMD Ryzen 7 5825u
AMD Ryzen 9 5900hx Firmware<cezannepi-fp6_1.0.0.9
AMD Ryzen 9 5900hx
AMD Ryzen 9 5900hs Firmware<cezannepi-fp6_1.0.0.9
AMD Ryzen 9 5900hs
AMD Ryzen 7 5825c Firmware<cezannepi-fp6_1.0.0.9
AMD Ryzen 7 5825c
AMD Ryzen 7 5800h Firmware<cezannepi-fp6_1.0.0.9
AMD Ryzen 7 5800h
AMD Ryzen 5 5625u Firmware<cezannepi-fp6_1.0.0.9
AMD Ryzen 5 5625u
AMD Ryzen 7 5800hs Firmware<cezannepi-fp6_1.0.0.9
AMD Ryzen 7 5800hs
AMD Ryzen 5 5625c Firmware<cezannepi-fp6_1.0.0.9
AMD Ryzen 5 5625c
AMD Ryzen 5 5600h Firmware<cezannepi-fp6_1.0.0.9
AMD Ryzen 5 5600h
AMD Ryzen 5 5600hs Firmware<cezannepi-fp6_1.0.0.9
AMD Ryzen 5 5600hs
AMD Ryzen 7 5800u Firmware<cezannepi-fp6_1.0.0.9
AMD Ryzen 7 5800u
AMD Ryzen 5 5600u Firmware<cezannepi-fp6_1.0.0.9
AMD Ryzen 5 5600u
AMD Ryzen 5 5560u Firmware<cezannepi-fp6_1.0.0.9
AMD Ryzen 5 5560u
AMD Ryzen 3 5425u Firmware<cezannepi-fp6_1.0.0.9
AMD Ryzen 3 5425u
AMD Ryzen 3 5425c Firmware<cezannepi-fp6_1.0.0.9
AMD Ryzen 3 5425c
AMD Ryzen 3 5400u Firmware<cezannepi-fp6_1.0.0.9
AMD Ryzen 3 5400u
AMD Ryzen 3 5125c Firmware<cezannepi-fp6_1.0.0.9
AMD Ryzen 3 5125c
AMD Athlon Silver 3050u Firmware
AMD Athlon Silver 3050u
AMD Athlon Gold 3150u Firmware
AMD Athlon Gold 3150u
AMD Ryzen 3 3200u Firmware
AMD Ryzen 3 3200u
AMD Ryzen 3 3250u Firmware
AMD Ryzen 3 3250u
AMD Ryzen 3 3300u Firmware
AMD Ryzen 3 3300u
AMD Ryzen 3 3350u Firmware
AMD Ryzen 3 3350u
AMD Ryzen 3 3450u Firmware
AMD Ryzen 3 3450u
AMD Ryzen 3 3500u Firmware
AMD Ryzen 3 3500u
AMD Ryzen 3 3500c Firmware
AMD Ryzen 3 3500c
AMD Ryzen 3 3550h Firmware
AMD Ryzen 3 3550h
AMD Ryzen 3 3580u Firmware
AMD Ryzen 3 3580u
AMD Ryzen 3 3700u Firmware
AMD Ryzen 3 3700u
AMD Ryzen 3 3700c Firmware
AMD Ryzen 3 3700c
AMD Ryzen 3 3750h Firmware
AMD Ryzen 3 3750h
AMD Ryzen 3 3780u Firmware
AMD Ryzen 3 3780u
AMD Ryzen 3 2200u Firmware<comboam4v2_pi_1.2.0.6c
AMD Ryzen 3 2200u
AMD Ryzen 3 2300u Firmware<comboam4v2_pi_1.2.0.6c
AMD Ryzen 3 2300u
AMD Ryzen 5 2500u Firmware<comboam4v2_pi_1.2.0.6c
AMD Ryzen 5 2500u
AMD Ryzen 5 2600 Firmware<comboam4v2_pi_1.2.0.6c
AMD Ryzen 5 2600
AMD Ryzen 5 2600h Firmware<comboam4v2_pi_1.2.0.6c
AMD Ryzen 5 2600h
AMD Ryzen 5 2600x Firmware<comboam4v2_pi_1.2.0.6c
AMD Ryzen 5 2600x
AMD Ryzen 5 2700 Firmware<comboam4v2_pi_1.2.0.6c
AMD Ryzen 5 2700
AMD Ryzen 5 2700x Firmware<comboam4v2_pi_1.2.0.6c
AMD Ryzen 5 2700x
AMD Ryzen 7 2700 Firmware<comboam4v2_pi_1.2.0.6c
AMD Ryzen 7 2700
AMD Ryzen 7 2700u Firmware<comboam4v2_pi_1.2.0.6c
AMD Ryzen 7 2700u
AMD Ryzen 7 2700x Firmware<comboam4v2_pi_1.2.0.6c
AMD Ryzen 7 2700x
AMD Ryzen 7 2800h Firmware<comboam4v2_pi_1.2.0.6c
AMD Ryzen 7 2800h
Event History
Jul 14, 2022
CVE Published
via MITRE·07:28 PM
Data Sourced
via MITRE·07:28 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-26384?
CVE-2021-26384 has a severity rating that suggests it may lead to potential out-of-bounds memory reads and writes.
2
How do I fix CVE-2021-26384?
To mitigate CVE-2021-26384, it is recommended to update the firmware to the latest version provided by AMD.
3
Which AMD products are affected by CVE-2021-26384?
CVE-2021-26384 affects specific AMD Ryzen and Athlon firmware versions, particularly those prior to comboam4_v2_pi_1.2.0.6c.
4
What are the potential consequences of CVE-2021-26384?
The consequences of CVE-2021-26384 may include out-of-bounds memory accesses that could lead to resource loss.
5
Is CVE-2021-26384 actively exploited?
There is no current indication that CVE-2021-26384 is actively being exploited in the wild.