Skip to content
fr Sign in
7.2 High

CVE-2021-26344 An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with…

Description

An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with access the ability to modify the BIOS image, and the ability to sign the resulting image, to potentially modify the APCB block resulting in arbitrary code execution.

Affected products and versions

Product Affected versions Fixed in
AMD EPYC™ 7001 Series Processors Versions not published
AMD EPYC™ 7002 Series Processors Versions not published
AMD EPYC™ 7003 Series Processors Versions not published
AMD Ryzen™ 3000 Series Desktop Processors Versions not published
AMD Ryzen™ 5000 Series Desktop Processors Versions not published
AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics Versions not published
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ Threadripper™ 3000 Series Processors Versions not published
Show the 22 other branches
Product Affected versions Fixed in
AMD Ryzen™ Threadripper™ PRO 5000WX Processors Versions not published
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics Versions not published
AMD EPYC™ Embedded 7002 Series Processors Versions not published
AMD EPYC™ Embedded 3000 Series Processors Versions not published
AMD EPYC™ Embedded 7003 Series Processors Versions not published
AMD Ryzen™ Embedded R1000 Series Processors Versions not published
AMD Ryzen™ Embedded R2000 Series Processors Versions not published
AMD Ryzen™ Embedded 5000 Series Processors Versions not published
AMD Ryzen™ Embedded V1000 Series Processors Versions not published
AMD Ryzen™ Embedded V2000 Series Processors Versions not published
AMD Ryzen™ Embedded V3000 Series Processors Versions not published
naplespi 1.0 earliest → < 1.0.0.k 1.0.0.k
romepi 1.0 earliest → < 1.0.0.C 1.0.0.C
milanpi 1.0 earliest → < 1.0.0.5 1.0.0.5

References

Timeline

  1. Published
  2. Last modified

Other CVEs of AMD EPYC™ 7001 Series Processors

The 10 CVEs of AMD EPYC™ 7001 Series Processors →
CVE-2026-0432 Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to… 8.5 High CVE-2025-48512 Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO)… 7.0 High CVE-2025-54505 A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the… 2.0 Low CVE-2023-31364 Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest… 8.3 High
Track this CVE