CVE-2021-26365
High
Description
Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information about out-of-bounds memory contents.
SeverityHigh
CVSS8.2
Exploit probability—
ProductAmd Ryzen 5 2400g Firmware
PublishedMay 9, 2023
First seenMay 9, 2023
Weakness typeCWE-125Out-of-bounds read
How to fix
Update
- amd ryzen_3_3200u_firmwarepicassopi-fp5_1.0.0.d or later
- amd ryzen_3_3250c_firmwarepicassopi-fp5_1.0.0.d or later
- amd ryzen_3_3250u_firmwarepicassopi-fp5_1.0.0.d or later
- amd amd_3015e_firmwarepollockpi-ft5_1.0.0.3 or later
- amd amd_3015ce_firmwarepollockpi-ft5_1.0.0.3 or later
- amd ryzen_7_5700u_firmwarecezannepi-fp6_1.0.0.8 or later
- amd ryzen_5_5500u_firmwarecezannepi-fp6_1.0.0.8 or later
- amd ryzen_3_5300u_firmwarecezannepi-fp6_1.0.0.8 or later
- amd ryzen_7_5700g_firmwarecezannepi-fp6_1.0.0.8 or later
- amd ryzen_7_5700ge_firmwarecezannepi-fp6_1.0.0.8 or later
- amd ryzen_5_5600g_firmwarecezannepi-fp6_1.0.0.8 or later
- amd ryzen_5_5600ge_firmwarecezannepi-fp6_1.0.0.8 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amd ryzen_5_2400g_firmware | No range specified | — |
| amd ryzen_5_2400ge_firmware | No range specified | — |
| amd ryzen_3_2200ge_firmware | No range specified | — |
| amd ryzen_3_2200g_firmware | No range specified | — |
| amd ryzen_3_pro_2100ge_firmware | No range specified | — |
| amd ryzen_9_5900x_firmware | No range specified | — |
| amd ryzen_9_5950x_firmware | No range specified | — |
| amd ryzen_9_5900_firmware | No range specified | — |
| amd ryzen_7_5800_firmware | No range specified | — |
| amd ryzen_7_5800x_firmware | No range specified | — |
| amd ryzen_7_5800x3d_firmware | No range specified | — |
| amd ryzen_7_5700x_firmware | No range specified | — |
| amd ryzen_5_5600_firmware | No range specified | — |
| amd ryzen_5_5600x_firmware | No range specified | — |
| amd ryzen_5_5500_firmware | No range specified | — |
| amd ryzen_3_3200u_firmware | v < picassopi-fp5_1.0.0.d | picassopi-fp5_1.0.0.d |
| amd ryzen_3_3250c_firmware | v < picassopi-fp5_1.0.0.d | picassopi-fp5_1.0.0.d |
| amd ryzen_3_3250u_firmware | v < picassopi-fp5_1.0.0.d | picassopi-fp5_1.0.0.d |
| amd amd_3015e_firmware | v < pollockpi-ft5_1.0.0.3 | pollockpi-ft5_1.0.0.3 |
| amd amd_3015ce_firmware | v < pollockpi-ft5_1.0.0.3 | pollockpi-ft5_1.0.0.3 |
| amd ryzen_7_2800h_firmware | No range specified | — |
| amd ryzen_7_2700u_firmware | No range specified | — |
| amd ryzen_5_2600h_firmware | No range specified | — |
| amd ryzen_5_2500u_firmware | No range specified | — |
| amd ryzen_3_2300u_firmware | No range specified | — |
| amd ryzen_3_2200u_firmware | No range specified | — |
| amd ryzen_5_3400g_firmware | No range specified | — |
| amd ryzen_5_pro_3400g_firmware | No range specified | — |
| amd ryzen_5_pro_3400ge_firmware | No range specified | — |
| amd ryzen_5_pro_3350g_firmware | No range specified | — |
| amd ryzen_5_pro_3350ge_firmware | No range specified | — |
| amd ryzen_3_pro_3200g_firmware | No range specified | — |
| amd ryzen_3_3200g_firmware | No range specified | — |
| amd ryzen_3_3200ge_firmware | No range specified | — |
| amd ryzen_3_pro_3200ge_firmware | No range specified | — |
| amd ryzen_7_5700u_firmware | v < cezannepi-fp6_1.0.0.8 | cezannepi-fp6_1.0.0.8 |
| amd ryzen_5_5500u_firmware | v < cezannepi-fp6_1.0.0.8 | cezannepi-fp6_1.0.0.8 |
| amd ryzen_3_5300u_firmware | v < cezannepi-fp6_1.0.0.8 | cezannepi-fp6_1.0.0.8 |
| amd ryzen_7_5700g_firmware | v < cezannepi-fp6_1.0.0.8 | cezannepi-fp6_1.0.0.8 |
| amd ryzen_7_5700ge_firmware | v < cezannepi-fp6_1.0.0.8 | cezannepi-fp6_1.0.0.8 |
| amd ryzen_5_5600g_firmware | v < cezannepi-fp6_1.0.0.8 | cezannepi-fp6_1.0.0.8 |
| amd ryzen_5_5600ge_firmware | v < cezannepi-fp6_1.0.0.8 | cezannepi-fp6_1.0.0.8 |
| amd ryzen_3_5300g_firmware | v < cezannepi-fp6_1.0.0.8 | cezannepi-fp6_1.0.0.8 |
| amd ryzen_3_5300ge_firmware | v < cezannepi-fp6_1.0.0.8 | cezannepi-fp6_1.0.0.8 |
| amd ryzen_9_6980hx_firmware | v < rmb_1.0.0.4 | rmb_1.0.0.4 |
| amd ryzen_9_6980hs_firmware | v < rmb_1.0.0.4 | rmb_1.0.0.4 |
| amd ryzen_9_6900hx_firmware | v < rmb_1.0.0.4 | rmb_1.0.0.4 |
| amd ryzen_9_6900hs_firmware | v < rmb_1.0.0.4 | rmb_1.0.0.4 |
| amd ryzen_7_6800h_firmware | v < rmb_1.0.0.4 | rmb_1.0.0.4 |
| amd ryzen_7_6800hs_firmware | v < rmb_1.0.0.4 | rmb_1.0.0.4 |
| amd ryzen_7_6800u_firmware | v < rmb_1.0.0.4 | rmb_1.0.0.4 |
| amd ryzen_5_6600h_firmware | v < rmb_1.0.0.4 | rmb_1.0.0.4 |
| amd ryzen_5_6600hs_firmware | v < rmb_1.0.0.4 | rmb_1.0.0.4 |
| amd ryzen_5_6600u_firmware | v < rmb_1.0.0.4 | rmb_1.0.0.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.