High severity7.4NVD Advisory· Published May 9, 2023· Updated Jun 17, 2026

CVE-2021-26356

Description

A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure.

Affected products

107

AMD/Epyc 7001 Firmware
cpe:2.3:o:amd:epyc_7001_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7002 Firmware
cpe:2.3:o:amd:epyc_7002_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7642 Firmware3 versions
cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
AMD/Epyc 7251 Firmware
cpe:2.3:o:amd:epyc_7251_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7252 Firmware
cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7261 Firmware
cpe:2.3:o:amd:epyc_7261_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7262 Firmware
cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7742 Firmware4 versions
cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
AMD/Epyc 7281 Firmware
cpe:2.3:o:amd:epyc_7281_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7542 Firmware2 versions
cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
AMD/Epyc 72f3 Firmware
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7301 Firmware
cpe:2.3:o:amd:epyc_7301_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7302 Firmware
cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7302p Firmware
cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7313 Firmware
cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7313p Firmware
cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7343 Firmware
cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7351 Firmware
cpe:2.3:o:amd:epyc_7351_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7351p Firmware
cpe:2.3:o:amd:epyc_7351p_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7352 Firmware
cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7371 Firmware
cpe:2.3:o:amd:epyc_7371_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7373x Firmware
cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7401 Firmware
cpe:2.3:o:amd:epyc_7401_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7401p Firmware
cpe:2.3:o:amd:epyc_7401p_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7402 Firmware
cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7413 Firmware
cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7443 Firmware
cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7443p Firmware
cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7451 Firmware
cpe:2.3:o:amd:epyc_7451_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7452 Firmware
cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7453 Firmware
cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7473x Firmware
cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 74f3 Firmware
cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7501 Firmware
cpe:2.3:o:amd:epyc_7501_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7502 Firmware
cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7513 Firmware
cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7f32 Firmware3 versions
cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
AMD/Epyc 7543 Firmware
cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7543p Firmware
cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7551 Firmware
cpe:2.3:o:amd:epyc_7551_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7551p Firmware
cpe:2.3:o:amd:epyc_7551p_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7573x Firmware
cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 75f3 Firmware
cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7601 Firmware
cpe:2.3:o:amd:epyc_7601_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7643 Firmware
cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7662 Firmware
cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7663 Firmware
cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7702 Firmware
cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7713 Firmware
cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7713p Firmware
cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7763 Firmware
cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7773x Firmware
cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.6
AMD/Epyc 7f52 Firmware
cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7f72 Firmware
cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Ryzen 5 5600u Firmware
cpe:2.3:o:amd:ryzen_3_3100_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen 3 3300x Firmware
cpe:2.3:o:amd:ryzen_3_3300x_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen 5 3500 Firmware
cpe:2.3:o:amd:ryzen_5_3500_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen 5 3500x Firmware
cpe:2.3:o:amd:ryzen_5_3500x_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen 5 3600 Firmware
cpe:2.3:o:amd:ryzen_5_3600_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen 5 3600x Firmware
cpe:2.3:o:amd:ryzen_5_3600x_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen 5 3600xt Firmware
cpe:2.3:o:amd:ryzen_5_3600xt_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen 5 5500 Firmware
cpe:2.3:o:amd:ryzen_5_5500_firmware:*:*:*:*:*:*:*:*
Range: <comboam4_v2_pi_1.2.0.6
AMD/Ryzen 5 5600 Firmware
cpe:2.3:o:amd:ryzen_5_5600_firmware:*:*:*:*:*:*:*:*
Range: <comboam4_v2_pi_1.2.0.6
AMD/Ryzen 5 5600x Firmware
cpe:2.3:o:amd:ryzen_5_5600x_firmware:*:*:*:*:*:*:*:*
Range: <comboam4_v2_pi_1.2.0.6
AMD/Ryzen 7 3700xt Firmware
cpe:2.3:o:amd:ryzen_7_3700xt_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen 7 3800x Firmware
cpe:2.3:o:amd:ryzen_7_3800x_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen 3 3250u Firmware
cpe:2.3:o:amd:ryzen_7_3800xt_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen 7 5700x Firmware
cpe:2.3:o:amd:ryzen_7_5700x_firmware:*:*:*:*:*:*:*:*
Range: <comboam4_v2_pi_1.2.0.6
AMD/Ryzen 7 5800 Firmware
cpe:2.3:o:amd:ryzen_7_5800_firmware:*:*:*:*:*:*:*:*
Range: <comboam4_v2_pi_1.2.0.6
AMD/Ryzen 7 5800x3d Firmware
cpe:2.3:o:amd:ryzen_7_5800x3d_firmware:*:*:*:*:*:*:*:*
Range: <comboam4_v2_pi_1.2.0.6
AMD/Ryzen 7 5800x Firmware
cpe:2.3:o:amd:ryzen_7_5800x_firmware:*:*:*:*:*:*:*:*
Range: <comboam4_v2_pi_1.2.0.6
AMD/Ryzen 9 3900 Firmware
cpe:2.3:o:amd:ryzen_9_3900_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen 9 3900x Firmware
cpe:2.3:o:amd:ryzen_9_3900x_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen 9 3950x Firmware
cpe:2.3:o:amd:ryzen_9_3950x_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen 9 3950xt Firmware
cpe:2.3:o:amd:ryzen_9_3950xt_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen 9 5900 Firmware
cpe:2.3:o:amd:ryzen_9_5900_firmware:*:*:*:*:*:*:*:*
Range: <comboam4_v2_pi_1.2.0.6
AMD/Ryzen 9 5900x Firmware
cpe:2.3:o:amd:ryzen_9_5900x_firmware:*:*:*:*:*:*:*:*
Range: <comboam4_v2_pi_1.2.0.6
AMD/Ryzen 9 5950x Firmware
cpe:2.3:o:amd:ryzen_9_5950x_firmware:*:*:*:*:*:*:*:*
Range: <comboam4_v2_pi_1.2.0.6
AMD/Ryzen Threadripper 3960x Firmware
cpe:2.3:o:amd:ryzen_threadripper_3960x_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen Threadripper 3970x Firmware
cpe:2.3:o:amd:ryzen_threadripper_3970x_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen Threadripper 3990x Firmware
cpe:2.3:o:amd:ryzen_threadripper_3990x_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen Threadripper Pro 3945wx Firmware
cpe:2.3:o:amd:ryzen_threadripper_pro_3945wx_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen Threadripper Pro 3955wx Firmware
cpe:2.3:o:amd:ryzen_threadripper_pro_3955wx_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen Threadripper Pro 3975wx Firmware
cpe:2.3:o:amd:ryzen_threadripper_pro_3975wx_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen Threadripper Pro 3995wx Firmware
cpe:2.3:o:amd:ryzen_threadripper_pro_3995wx_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen Threadripper Pro 5945wx Firmware
cpe:2.3:o:amd:ryzen_threadripper_pro_5945wx_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen Threadripper Pro 5955wx Firmware
cpe:2.3:o:amd:ryzen_threadripper_pro_5955wx_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen Threadripper Pro 5965wx Firmware
cpe:2.3:o:amd:ryzen_threadripper_pro_5965wx_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen Threadripper Pro 5975wx Firmware
cpe:2.3:o:amd:ryzen_threadripper_pro_5975wx_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen Threadripper 2920x Firmware
cpe:2.3:o:amd:ryzen_threadripper_pro_5995wx_firmware:-:*:*:*:*:*:*:*
AMD/ASP Bootloaderllm-fuzzy
AMD/EPYC Processorscpe-rescue3 versions
various + 2 more
- (no CPE)range: various
- (no CPE)range: various
- (no CPE)range: various
AMD/3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDTv5
Range: various
AMD/AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4v5
Range: various
AMD/Ryzen™ 3000 Series Desktop Processors “Matisse” AM4v5
Range: various
AMD/Ryzen™ Threadripper™ PRO Processors “Castle Peak” WSv5
Range: various
AMD/Ryzen™ Threadripper™ PRO Processors “Chagall” WSv5
Range: various

Patches

Vulnerability mechanics

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001nvdVendor Advisory
www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.481
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000