rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-26354 
Insufficient bounds checking in ASP may allow an
attacker to issue a system call from a compromised ABL which may cause
arbitrary memory values to be initialized to zero, potentially leading to a
loss of integrity.





Affected products: vendor: AMD
product: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics  “Cezanne” AM4
default_status: unaffected
vendor: AMD
product: 2nd Gen AMD Ryzen™ Threadripper™ Processors “Colfax”
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT
default_status: unaffected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS
default_status: unaffected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Chagall” WS
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics   “Pollock”
default_status: unaffected
vendor: AMD
product: Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” 
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”
default_status: unaffected
vendor: AMD
product: 2nd Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD EPYC™ Processors
default_status: unaffected
Published: 2023-05-09T18:58:37.664Z
CVE-2021-26355 
Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid message port registers that could result in a potential denial-of-service.


Problem types: description: n/a
Affected products: vendor: AMD
product: 3rd Gen EPYC
default_status: unaffected
Published: 2023-01-10T20:56:37.810Z
CVE-2021-26356 
A TOCTOU in ASP bootloader may allow an attacker
to tamper with the SPI ROM following data read to memory potentially resulting
in S3 data corruption and information disclosure.









Affected products: vendor: AMD
product: Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT
default_status: unaffected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS
default_status: unaffected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Chagall” WS
default_status: unaffected
vendor: AMD
product: 1st Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: 2nd Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD EPYC™ Processors
default_status: unaffected
Published: 2023-05-09T18:58:48.108Z
CVE-2021-26360 
An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP.
Problem types: description: TBD
Affected products: vendor: AMD
product: AMD Radeon RX 6000 Series & PRO W6000 Series
Published: 2022-11-09T20:44:26.034Z
CVE-2021-26361 
A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to information disclosure.
Problem types: description: tbd
Affected products: vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-05-12T17:46:01.990Z
CVE-2021-26362 
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management Network (SMN) registers leading to a loss of integrity and availability.
Problem types: description: tbd
Affected products: vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-05-12T17:43:15.598Z
CVE-2021-26363 
A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenced area, potentially leading to data exposure.
Problem types: description: tbd
Affected products: vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-05-12T18:39:33.159Z
CVE-2021-26364 
Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service.
Problem types: description: tbd
Affected products: vendor: AMD
product: EPYC™ Processors
Published: 2022-05-11T16:25:26.746Z
CVE-2021-26365 
Certain size values in firmware binary headers
could trigger out of bounds reads during signature validation, leading to
denial of service or potentially limited leakage of information about
out-of-bounds memory contents.












Affected products: vendor: AMD
product: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics  “Cezanne” AM4
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics   “Pollock”
default_status: unaffected
vendor: AMD
product: Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” 
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”
default_status: unaffected
vendor: AMD
product: Ryzen™ 6000 Series Mobile Processors  "Rembrandt"
default_status: unaffected
Published: 2023-05-09T18:58:57.236Z
CVE-2021-26366 
An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM resulting in a loss of system integrity.
Problem types: description: tbd
Affected products: vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-05-12T17:09:29.825Z
CVE-2021-26367 
A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability.
Affected products: vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Athlon™ 3000 Series Mobile  Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Athlon™ 3000 Series Mobile  Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics
default_status: unaffected
vendor: AMD
product: AMD Radeon™ RX 6000 Series Graphics Cards
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W6000 Series Graphics Cards
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded R1000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded R2000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V1000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V2000 Series Processors
default_status: affected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 5.7
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H
version: 3.1
Published: 2024-08-13T16:50:05.825Z
CVE-2021-26368 
Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser privileged process to unmap memory owned by a higher privileged process resulting in a denial of service.
Problem types: description: tbd
Affected products: vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-05-12T18:22:27.719Z
CVE-2021-26369 
A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses.
Problem types: description: tbd
Affected products: vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-05-12T17:07:32.274Z
CVE-2021-26370 
Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: AMD
product: 2nd Gen AMD EPYC™
vendor: AMD
product: 3rd Gen AMD EPYC™
Published: 2022-05-10T18:25:17.618Z
CVE-2021-26371 
A compromised or malicious ABL or UApp could
send a SHA256 system call to the bootloader, which may result in exposure of
ASP memory to userspace, potentially leading to information disclosure.









Affected products: vendor: AMD
product: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT
default_status: unaffected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS
default_status: unaffected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Chagall” WS
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics   “Pollock”
default_status: unaffected
vendor: AMD
product: Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”
default_status: unaffected
vendor: AMD
product: 1st Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: 2nd Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD EPYC™ Processors
default_status: unaffected
Published: 2023-05-09T18:59:16.122Z
CVE-2021-26372 
Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service.
Problem types: description: tbd
Affected products: vendor: AMD
product: EPYC™ Processors
vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-05-11T16:18:58.798Z
CVE-2021-26373 
Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could result in denial of resources and/or possibly denial of service.
Problem types: description: tbd
Affected products: vendor: AMD
product: EPYC™ Processors
vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-05-11T16:27:13.373Z
CVE-2021-26375 
Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/to invalid address space that could result in denial of service.
Problem types: description: tbd
Affected products: vendor: AMD
product: EPYC™ Processors
vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-05-11T16:20:03.207Z
CVE-2021-26376 
Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling features potentially resulting in denial of resources and/or denial of service.
Problem types: description: tbd
Affected products: vendor: AMD
product: EPYC™ Processors
vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-05-11T16:28:09.769Z
CVE-2021-26378 
Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service.
Problem types: description: tbd
Affected products: vendor: AMD
product: EPYC™ Processors
vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-05-11T16:23:26.758Z
CVE-2021-26379 
Insufficient input validation of mailbox data in the
SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially
leading to a loss of integrity and privilege escalation.




Affected products: vendor: AMD
product: 2nd Gen AMD EPYC™ 
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD EPYC™ 
default_status: unaffected
Published: 2023-05-09T18:36:18.303Z
CVE-2021-26380 
A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow  memory access outside the intended range resulting in loss of integrity.
Problem types: cwe_id: CWE-190
description: CWE-190  Integer Overflow or Wraparound
Affected products: vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 3000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded R1000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded R2000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 5000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso")
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V2000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V3000 Series Processors
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 5000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W5000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ RX Vega Series Graphics Cards
default_status: affected
vendor: AMD
product: AMD Radeon™ VII
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO WX 8000/9000 Series Graphics Cards
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO VII
default_status: affected
vendor: AMD
product: AMD Radeon™ Instinct™ MI25
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V520
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V620
default_status: affected
Published: 2026-05-15T02:25:20.977Z
CVE-2021-26381 
Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping operations on a large number of pages, potentially resulting in kernel memory corruption.
Problem types: cwe_id: CWE-770
description: CWE-770  Allocation of Resources Without Limits or Throttling
Affected products: vendor: AMD
product: AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
default_status: affected
vendor: AMD
product: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 3000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded R1000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded R2000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 5000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso")
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V2000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V3000 Series Processors
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 5000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W5000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V520
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V620
default_status: affected
Published: 2026-02-10T19:47:26.356Z
CVE-2021-26382 
An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.
Problem types: description: tbd
Affected products: vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-07-14T19:28:30.676Z
CVE-2021-26383 
Insufficient bounds checking in AMD TEE (Trusted Execution Environment) could allow an attacker with a compromised userspace to invoke a command with malformed arguments leading to out of bounds memory access, potentially resulting in loss of integrity or availability.
Problem types: cwe_id: CWE-787
description: CWE-787  Out-of-bounds Write
Affected products: vendor: AMD
product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V2000 Series Processors
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 5000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W5000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Instinct™ MI210
default_status: affected
vendor: AMD
product: AMD Instinct™ MI250
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V520 Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V620 Graphics Products
default_status: affected
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 7.9
baseSeverity: HIGH
Published: 2025-09-05T23:21:25.947Z
CVE-2021-26384 
A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources.
Problem types: description: tbd
Affected products: vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-07-14T19:28:56.918Z
CVE-2021-26386 
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially leading to corrupt memory and code execution.
Problem types: description: tbd
Affected products: vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-05-12T18:28:38.025Z
CVE-2021-26388 
Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service.
Problem types: description: tbd
Affected products: vendor: AMD
product: EPYC™ Processors
vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-05-11T16:29:06.174Z
CVE-2021-26390 
A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to loss of integrity of data.
Problem types: description: tbd
Affected products: vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-05-10T18:24:25.459Z