Medium severity4.7NVD Advisory· Published May 11, 2022· Updated Jun 17, 2026

CVE-2021-26347

Description

Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.

Affected products

AMD/Epyc 7002 Firmware
cpe:2.3:o:amd:epyc_7002_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7642 Firmware3 versions
cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
- cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
- cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
AMD/Epyc 7252 Firmware
cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7262 Firmware
cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7742 Firmware4 versions
cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
- cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
- cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
- cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
AMD/Epyc 7542 Firmware2 versions
cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
- cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
AMD/Epyc 72f3 Firmware
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7302 Firmware2 versions
cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
- cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
AMD/Epyc 7302p Firmware
cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7313 Firmware
cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7313p Firmware
cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7343 Firmware
cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7352 Firmware
cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7373x Firmware
cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 73f3 Firmware
cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7402 Firmware
cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7413 Firmware
cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7443 Firmware
cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7443p Firmware
cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7452 Firmware
cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7453 Firmware
cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7473x Firmware
cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 74f3 Firmware
cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7502 Firmware
cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7513 Firmware
cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7f32 Firmware3 versions
cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
- cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
- cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
AMD/Epyc 7543 Firmware
cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7543p Firmware
cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7573x Firmware
cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 75f3 Firmware
cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7643 Firmware
cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7662 Firmware
cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7663 Firmware
cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7702 Firmware
cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7713 Firmware
cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7713p Firmware
cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7763 Firmware
cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7773x Firmware
cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7f52 Firmware
cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7f72 Firmware
cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Secure Processorllm-fuzzy
osv-coords31 versions
pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%2015.4 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Manager%20Proxy%204.1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Manager%20Server%204.1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/kernel-firmware&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
< 20210208-150300.4.10.1+ 30 more
- (no CPE)range: < 20210208-150300.4.10.1
- (no CPE)range: < 20220509-150400.4.5.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20191118-150000.3.42.1
- (no CPE)range: < 20191118-150000.3.42.1
- (no CPE)range: < 20210208-150300.4.10.1
- (no CPE)range: < 20210208-150300.4.10.1
- (no CPE)range: < 20210208-150300.4.10.1
- (no CPE)range: < 20220509-150400.4.5.1
- (no CPE)range: < 20190618-5.25.2
- (no CPE)range: < 20190618-5.25.2
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20191118-150000.3.42.1
- (no CPE)range: < 20190618-5.25.2
- (no CPE)range: < 20190618-5.25.2
- (no CPE)range: < 20191118-150000.3.42.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20190618-5.25.2
- (no CPE)range: < 20190618-5.25.2
AMD/Ryzen 5000 Seriesv5
Range: various

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2021-26347

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions