High severity7.8NVD Advisory· Published Nov 16, 2021· Updated Jun 17, 2026
CVE-2021-26335
CVE-2021-26335
Description
Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to use attacker-controlled values prior to signature validation potentially resulting in arbitrary code execution.
Affected products
61- AMD/Ryzen™ Seriesv5Range: various
- AMD/Athlon™ Seriesv5Range: various
cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7351p_firmware:*:*:*:*:*:*:*:*Range: <naplespi-sp3_1.0.0.g
- cpe:2.3:o:amd:epyc_7401p_firmware:*:*:*:*:*:*:*:*Range: <naplespi-sp3_1.0.0.g
- cpe:2.3:o:amd:epyc_7551p_firmware:*:*:*:*:*:*:*:*Range: <naplespi-sp3_1.0.0.g
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.