4.1 Medium

CVE-2021-26377 Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious…

Description

Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious userspace process to trigger an integer overflow, leading to a potential denial of service.

Affected products and versions

Product	Affected versions	Fixed in
AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ Threadripper™ 3000 Series Processors	Versions not published
AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors	Versions not published
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors	Versions not published
AMD Ryzen™ 5000 Series Desktop Processors	Versions not published
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ 3000 Series Desktop Processors	Versions not published
AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics	Versions not published

Show the 16 other branches

Product	Affected versions	Fixed in
AMD Ryzen™ 4000 Series Desktop Processors	Versions not published
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ Embedded R1000 Series Processors	Versions not published
AMD Ryzen™ Embedded R2000 Series Processors	Versions not published
AMD Ryzen™ Embedded 5000 Series Processors	Versions not published
AMD Ryzen™ Embedded V1000 Series Processors	Versions not published
AMD Ryzen™ Embedded V2000 Series Processors	Versions not published
AMD Ryzen™ Embedded V3000 Series Processors	Versions not published
AMD Radeon™ RX 5000 Series Graphics Products	Versions not published
AMD Radeon™ PRO W5000 Series Graphics Products	Versions not published
AMD Radeon™ RX 6000 Series Graphics Products	Versions not published
AMD Radeon™ PRO W6000 Series Graphics Products	Versions not published
AMD Radeon™ Instinct™ MI25 Graphics Products	Versions not published
AMD Radeon™ PRO V520 Graphics Products	Versions not published
AMD Radeon™ PRO V620 Graphics Products	Versions not published

References

www.amd.com www.amd.com
www.amd.com www.amd.com
www.amd.com www.amd.com

Timeline

Published September 6, 2025
Last modified September 8, 2025

The 25 CVEs of AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics →

CVE-2023-20577 A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI… 7.4 High CVE-2023-20572 An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against… 5.6 Medium CVE-2025-0009 A NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output to a log file… 5.5 Medium CVE-2024-36357 A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache,… 5.6 Medium

Track this CVE