High severity8.2NVD Advisory· Published May 9, 2023· Updated Jun 17, 2026
CVE-2021-26365
CVE-2021-26365
Description
Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information about out-of-bounds memory contents.
Affected products
65- AMD/Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4v5Range: various
- AMD/Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4v5Range: various
- AMD/Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULPv5Range: various
- AMD/Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”v5Range: various
- AMD/Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5v5Range: various
- AMD/Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”v5Range: various
- AMD/Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir”v5Range: various
- AMD/Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”v5Range: various
- AMD/Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”v5Range: various
- AMD/Ryzen™ 6000 Series Mobile Processors "Rembrandt"v5Range: various
- cpe:2.3:o:amd:ryzen_5_2400g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_5_2400ge_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_3_2200ge_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_3_2200g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_3_pro_2100ge_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_9_5900x_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_9_5950x_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_9_5900_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_7_5800_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_7_5800x_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_7_5800x3d_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_7_5700x_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_5_5600_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_5_5600x_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_5_5500_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_3_3200u_firmware:*:*:*:*:*:*:*:*Range: <picassopi-fp5_1.0.0.d
- cpe:2.3:o:amd:ryzen_3_3250c_firmware:*:*:*:*:*:*:*:*Range: <picassopi-fp5_1.0.0.d
- cpe:2.3:o:amd:ryzen_3_3250u_firmware:*:*:*:*:*:*:*:*Range: <picassopi-fp5_1.0.0.d
- cpe:2.3:o:amd:amd_3015ce_firmware:*:*:*:*:*:*:*:*Range: <pollockpi-ft5_1.0.0.3
- cpe:2.3:o:amd:ryzen_7_2800h_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_7_2700u_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_5_2600h_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_5_2500u_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_3_2300u_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_3_2200u_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_5_3400g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_5_pro_3400g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_5_pro_3400ge_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_5_pro_3350g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_5_pro_3350ge_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_3_pro_3200g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_3_3200g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_3_3200ge_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_3_pro_3200ge_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:ryzen_7_5700u_firmware:*:*:*:*:*:*:*:*Range: <cezannepi-fp6_1.0.0.8
- cpe:2.3:o:amd:ryzen_5_5500u_firmware:*:*:*:*:*:*:*:*Range: <cezannepi-fp6_1.0.0.8
- cpe:2.3:o:amd:ryzen_3_5300u_firmware:*:*:*:*:*:*:*:*Range: <cezannepi-fp6_1.0.0.8
- cpe:2.3:o:amd:ryzen_7_5700g_firmware:*:*:*:*:*:*:*:*Range: <cezannepi-fp6_1.0.0.8
- cpe:2.3:o:amd:ryzen_7_5700ge_firmware:*:*:*:*:*:*:*:*Range: <cezannepi-fp6_1.0.0.8
- cpe:2.3:o:amd:ryzen_5_5600g_firmware:*:*:*:*:*:*:*:*Range: <cezannepi-fp6_1.0.0.8
- cpe:2.3:o:amd:ryzen_5_5600ge_firmware:*:*:*:*:*:*:*:*Range: <cezannepi-fp6_1.0.0.8
- cpe:2.3:o:amd:ryzen_3_5300g_firmware:*:*:*:*:*:*:*:*Range: <cezannepi-fp6_1.0.0.8
- cpe:2.3:o:amd:ryzen_3_5300ge_firmware:*:*:*:*:*:*:*:*Range: <cezannepi-fp6_1.0.0.8
Patches
Vulnerability mechanics
References
1- www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001nvdVendor Advisory
News mentions
0No linked articles in our index yet.