CVE-2021-26356 : A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM foll

A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure.

Published 2023-05-09 19:15:11

Updated 2023-05-16 19:01:36

Source Advanced Micro Devices Inc.

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2021-26356

AMD » Epyc 7601 Firmware
Versions before (<) naplespi_1.0.0.h
cpe:2.3:o:amd:epyc_7601_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7601 » Version: N/A
AMD » Epyc 7551p Firmware
Versions before (<) naplespi_1.0.0.h
cpe:2.3:o:amd:epyc_7551p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7551p » Version: N/A
AMD » Epyc 7551 Firmware
Versions before (<) naplespi_1.0.0.h
cpe:2.3:o:amd:epyc_7551_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7551 » Version: N/A
AMD » Epyc 7501 Firmware
Versions before (<) naplespi_1.0.0.h
cpe:2.3:o:amd:epyc_7501_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7501 » Version: N/A
AMD » Epyc 7451 Firmware
Versions before (<) naplespi_1.0.0.h
cpe:2.3:o:amd:epyc_7451_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7451 » Version: N/A
AMD » Epyc 7401 Firmware
Versions before (<) naplespi_1.0.0.h
cpe:2.3:o:amd:epyc_7401_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7401 » Version: N/A
AMD » Epyc 7371 Firmware
Versions before (<) naplespi_1.0.0.h
cpe:2.3:o:amd:epyc_7371_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7371 » Version: N/A
AMD » Epyc 7351p Firmware
Versions before (<) naplespi_1.0.0.h
cpe:2.3:o:amd:epyc_7351p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7351p » Version: N/A
AMD » Epyc 7351 Firmware
Versions before (<) naplespi_1.0.0.h
cpe:2.3:o:amd:epyc_7351_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7351 » Version: N/A
AMD » Epyc 7301 Firmware
Versions before (<) naplespi_1.0.0.h
cpe:2.3:o:amd:epyc_7301_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7301 » Version: N/A
AMD » Epyc 7281 Firmware
Versions before (<) naplespi_1.0.0.h
cpe:2.3:o:amd:epyc_7281_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7281 » Version: N/A
AMD » Epyc 7261 Firmware
Versions before (<) naplespi_1.0.0.h
cpe:2.3:o:amd:epyc_7261_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7261 » Version: N/A
AMD » Epyc 7251 Firmware
Versions before (<) naplespi_1.0.0.h
cpe:2.3:o:amd:epyc_7251_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7251 » Version: N/A
AMD » Epyc 7f72 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7f72 » Version: N/A
AMD » Epyc 7f52 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7f52 » Version: N/A
AMD » Epyc 7f32 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7f32 » Version: N/A
AMD » Epyc 7h12 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7h12 » Version: N/A
AMD » Epyc 7742 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7742 » Version: N/A
AMD » Epyc 7702 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7702 » Version: N/A
AMD » Epyc 7702p Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7702p » Version: N/A
AMD » Epyc 7662 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7662 » Version: N/A
AMD » Epyc 7642 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7642 » Version: N/A
AMD » Epyc 7552 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7552 » Version: N/A
AMD » Epyc 7542 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7542 » Version: N/A
AMD » Epyc 7532 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7532 » Version: N/A
AMD » Epyc 7502 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7502 » Version: N/A
AMD » Epyc 7452 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7452 » Version: N/A
AMD » Epyc 7402 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7402 » Version: N/A
AMD » Epyc 7402p Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7402p » Version: N/A
AMD » Epyc 7352 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7352 » Version: N/A
AMD » Epyc 7302 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7302 » Version: N/A
AMD » Epyc 7302p Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7302p » Version: N/A
AMD » Epyc 7282 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7282 » Version: N/A
AMD » Epyc 7272 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7272 » Version: N/A
AMD » Epyc 7262 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7262 » Version: N/A
AMD » Epyc 7252 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7252 » Version: N/A
AMD » Epyc 7232p Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7232p » Version: N/A
AMD » Epyc 7763 Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7763 » Version: N/A
AMD » Epyc 7713p Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7713p » Version: N/A
AMD » Epyc 7713 Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7713 » Version: N/A
AMD » Epyc 7663 Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7663 » Version: N/A
AMD » Epyc 7643 Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7643 » Version: N/A
AMD » Epyc 75f3 Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 75f3 » Version: N/A
AMD » Epyc 7543p Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7543p » Version: N/A
AMD » Epyc 7543 Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7543 » Version: N/A
AMD » Epyc 7513 Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7513 » Version: N/A
AMD » Epyc 7453 Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7453 » Version: N/A
AMD » Epyc 74f3 Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 74f3 » Version: N/A
AMD » Epyc 7443p Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7443p » Version: N/A
AMD » Epyc 7443 Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7443 » Version: N/A
AMD » Epyc 7413 Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7413 » Version: N/A
AMD » Epyc 7343 Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7343 » Version: N/A
AMD » Epyc 7313p Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7313p » Version: N/A
AMD » Epyc 7313 Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7313 » Version: N/A
AMD » Epyc 72f3 Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 72f3 » Version: N/A
AMD » Epyc 7002 Firmware
Versions before (<) romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7002_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7002 » Version: N/A
AMD » Epyc 7001 Firmware
Versions before (<) naplespi_1.0.0.h
cpe:2.3:o:amd:epyc_7001_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7001 » Version: N/A
AMD » Epyc 7401p Firmware
Versions before (<) naplespi_1.0.0.h
cpe:2.3:o:amd:epyc_7401p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7401p » Version: N/A
AMD » Ryzen Threadripper Pro 3995wx Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_pro_3995wx_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper Pro 3995wx » Version: N/A
AMD » Ryzen Threadripper Pro 3975wx Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_pro_3975wx_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper Pro 3975wx » Version: N/A
AMD » Ryzen Threadripper Pro 3955wx Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_pro_3955wx_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper Pro 3955wx » Version: N/A
AMD » Ryzen Threadripper Pro 3945wx Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_pro_3945wx_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper Pro 3945wx » Version: N/A
AMD » Ryzen Threadripper 3990x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_3990x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper 3990x » Version: N/A
AMD » Ryzen Threadripper 3970x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_3970x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper 3970x » Version: N/A
AMD » Ryzen Threadripper 3960x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_3960x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper 3960x » Version: N/A
AMD » Ryzen Threadripper Pro 5995wx Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_pro_5995wx_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper Pro 5995wx » Version: N/A
AMD » Ryzen Threadripper Pro 5975wx Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_pro_5975wx_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper Pro 5975wx » Version: N/A
AMD » Ryzen Threadripper Pro 5965wx Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_pro_5965wx_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper Pro 5965wx » Version: N/A
AMD » Ryzen Threadripper Pro 5955wx Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_pro_5955wx_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper Pro 5955wx » Version: N/A
AMD » Ryzen Threadripper Pro 5945wx Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_pro_5945wx_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper Pro 5945wx » Version: N/A
AMD » Ryzen 9 3950x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_9_3950x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 3950x » Version: N/A
AMD » Ryzen 9 3900x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_9_3900x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 3900x » Version: N/A
AMD » Ryzen 7 3800x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_7_3800x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 3800x » Version: N/A
AMD » Ryzen 5 3600x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5_3600x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 3600x » Version: N/A
AMD » Ryzen 5 3600 Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5_3600_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 3600 » Version: N/A
AMD » Ryzen 3 3300x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_3_3300x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 3300x » Version: N/A
AMD » Ryzen 3 3100 Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_3_3100_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 3100 » Version: N/A
AMD » Epyc 7773x Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7773x » Version: N/A
AMD » Epyc 7473x Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7473x » Version: N/A
AMD » Epyc 7573x Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7573x » Version: N/A
AMD » Epyc 7373x Firmware
Versions before (<) milanpi_1.0.0.6
cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7373x » Version: N/A
AMD » Ryzen 9 5950x Firmware
Versions before (<) comboam4_v2_pi_1.2.0.6
cpe:2.3:o:amd:ryzen_9_5950x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 5950x » Version: N/A
AMD » Ryzen 9 5900x Firmware
Versions before (<) comboam4_v2_pi_1.2.0.6
cpe:2.3:o:amd:ryzen_9_5900x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 5900x » Version: N/A
AMD » Ryzen 7 5800x Firmware
Versions before (<) comboam4_v2_pi_1.2.0.6
cpe:2.3:o:amd:ryzen_7_5800x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 5800x » Version: N/A
AMD » Ryzen 5 5600x Firmware
Versions before (<) comboam4_v2_pi_1.2.0.6
cpe:2.3:o:amd:ryzen_5_5600x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 5600x » Version: N/A
AMD » Ryzen 7 5800x3d Firmware
Versions before (<) comboam4_v2_pi_1.2.0.6
cpe:2.3:o:amd:ryzen_7_5800x3d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 5800x3d » Version: N/A
AMD » Ryzen 7 5700x Firmware
Versions before (<) comboam4_v2_pi_1.2.0.6
cpe:2.3:o:amd:ryzen_7_5700x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 5700x » Version: N/A
AMD » Ryzen 5 5600 Firmware
Versions before (<) comboam4_v2_pi_1.2.0.6
cpe:2.3:o:amd:ryzen_5_5600_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 5600 » Version: N/A
AMD » Ryzen 5 5500 Firmware
Versions before (<) comboam4_v2_pi_1.2.0.6
cpe:2.3:o:amd:ryzen_5_5500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 5500 » Version: N/A
AMD » Ryzen 5 3600xt Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5_3600xt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 3600xt » Version: N/A
AMD » Ryzen 7 3800xt Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_7_3800xt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 3800xt » Version: N/A
AMD » Ryzen 5 3500 Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5_3500_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 3500 » Version: N/A
AMD » Ryzen 5 3500x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5_3500x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 3500x » Version: N/A
AMD » Ryzen 9 3900 Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_9_3900_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 3900 » Version: N/A
AMD » Ryzen 7 5800 Firmware
Versions before (<) comboam4_v2_pi_1.2.0.6
cpe:2.3:o:amd:ryzen_7_5800_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 5800 » Version: N/A
AMD » Ryzen 9 5900 Firmware
Versions before (<) comboam4_v2_pi_1.2.0.6
cpe:2.3:o:amd:ryzen_9_5900_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 5900 » Version: N/A
AMD » Ryzen 9 3950xt Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_9_3950xt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 3950xt » Version: N/A
AMD » Ryzen 7 3700xt Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_7_3700xt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 3700xt » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-26356

EPSS FAQ

0.16%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 53 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-26356

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.4	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N	2.2	5.2	NIST
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: None

CWE ids for CVE-2021-26356

CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2021-26356

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001

Access Denied
Vendor Advisory

CVEs referencing this url
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001

Access Denied
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2021-26356

Products affected by CVE-2021-26356

Exploit prediction scoring system (EPSS) score for CVE-2021-26356

CVSS scores for CVE-2021-26356

CWE ids for CVE-2021-26356

References for CVE-2021-26356