High severity7.4NVD Advisory· Published May 9, 2023· Updated Jun 17, 2026
CVE-2021-26356
CVE-2021-26356
Description
A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure.
Affected products
107various + 2 more
- (no CPE)range: various
- (no CPE)range: various
- (no CPE)range: various
- AMD/Ryzen™ 3000 Series Desktop Processors “Matisse” AM4v5Range: various
- AMD/AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4v5Range: various
- AMD/3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDTv5Range: various
- AMD/Ryzen™ Threadripper™ PRO Processors “Castle Peak” WSv5Range: various
- AMD/Ryzen™ Threadripper™ PRO Processors “Chagall” WSv5Range: various
cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:ryzen_9_3950x_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_9_3950xt_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_9_3900_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_9_3900x_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_7_3800x_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_7_3800xt_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_7_3700xt_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_5_3600x_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_5_3600xt_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_5_3600_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_5_3500x_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_5_3500_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_3_3300x_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_3_3100_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_9_5950x_firmware:*:*:*:*:*:*:*:*Range: <comboam4_v2_pi_1.2.0.6
- cpe:2.3:o:amd:ryzen_9_5900x_firmware:*:*:*:*:*:*:*:*Range: <comboam4_v2_pi_1.2.0.6
- cpe:2.3:o:amd:ryzen_9_5900_firmware:*:*:*:*:*:*:*:*Range: <comboam4_v2_pi_1.2.0.6
- cpe:2.3:o:amd:ryzen_7_5800x3d_firmware:*:*:*:*:*:*:*:*Range: <comboam4_v2_pi_1.2.0.6
- cpe:2.3:o:amd:ryzen_7_5800x_firmware:*:*:*:*:*:*:*:*Range: <comboam4_v2_pi_1.2.0.6
- cpe:2.3:o:amd:ryzen_7_5800_firmware:*:*:*:*:*:*:*:*Range: <comboam4_v2_pi_1.2.0.6
- cpe:2.3:o:amd:ryzen_7_5700x_firmware:*:*:*:*:*:*:*:*Range: <comboam4_v2_pi_1.2.0.6
- cpe:2.3:o:amd:ryzen_5_5600_firmware:*:*:*:*:*:*:*:*Range: <comboam4_v2_pi_1.2.0.6
- cpe:2.3:o:amd:ryzen_5_5600x_firmware:*:*:*:*:*:*:*:*Range: <comboam4_v2_pi_1.2.0.6
- cpe:2.3:o:amd:ryzen_5_5500_firmware:*:*:*:*:*:*:*:*Range: <comboam4_v2_pi_1.2.0.6
- cpe:2.3:o:amd:ryzen_threadripper_3990x_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_threadripper_3970x_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_threadripper_3960x_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_threadripper_pro_3995wx_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_threadripper_pro_3975wx_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_threadripper_pro_3955wx_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_threadripper_pro_3945wx_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_threadripper_pro_5955wx_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_threadripper_pro_5965wx_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_threadripper_pro_5945wx_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_threadripper_pro_5975wx_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_threadripper_pro_5995wx_firmware:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001nvdVendor Advisory
- www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001nvdVendor Advisory
News mentions
0No linked articles in our index yet.