3.9
Low
CVE-2021-26387 Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the…
Description
Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell to map DRAM regions in protected areas, potentially leading to a loss of platform integrity.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD EPYC™ 7001 Series Processors | Versions not published | |
| AMD EPYC™ 7002 Series Processors | Versions not published | |
| AMD EPYC™ 7003 Series Processors | Versions not published | |
| AMD EPYC™ 9004 Series Processors | Versions not published | |
| AMD Ryzen™ 3000 Series Desktop Processors | Versions not published | |
| AMD Ryzen™ 5000 Series Desktop Processors | Versions not published | |
| AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 7000 Series Desktop Processors | Versions not published | |
| AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics | Versions not published |
Show the 22 other branches Hide the 22 other branches
References
- www.amd.com www.amd.com
- www.amd.com www.amd.com
Timeline
- Published
- Last modified
Other CVEs of AMD EPYC™ 7001 Series Processors
The 10 CVEs of AMD EPYC™ 7001 Series Processors →
CVE-2026-0432
Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to…
8.5
High
CVE-2025-48512
Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO)…
7.0
High
CVE-2025-54505
A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the…
2.0
Low
CVE-2023-31364
Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest…
8.3
High