7.8
High
CVE-2021-26316 Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper…
Description
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ryzen 5000 Series | Versions not published | |
| Ryzen 2000 Series | Versions not published | |
| Ryzen 3000 Series | Versions not published | |
| 1st Gen EPYC | Versions not published | |
| 2nd Gen EPYC | Versions not published | |
| 3rd Gen EPYC | Versions not published |
Other CVEs of Ryzen 5000 Series
The 4 CVEs of Ryzen 5000 Series →
CVE-2021-46795
A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the…
4.7
Medium
CVE-2021-26346
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an…
5.5
Medium
CVE-2021-26347
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an…
Not rated