CVE-2021-26365

published 2023-05-09

CVE-2021-26365: Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially…

Priority P3 37 high 8.2 CVSS 3.1

AV N AC L PR N UI N S U C L I N A H

Certain size values in firmware binary headers
could trigger out of bounds reads during signature validation, leading to
denial of service or potentially limited leakage of information about
out-of-bounds memory contents.

Affected

33 ranges · showing 25

Vendor	Product	Version range	Fixed in
amd	amd_3015ce_firmware	< pollockpi-ft5_1.0.0.3	pollockpi-ft5_1.0.0.3
amd	amd_3015e_firmware	< pollockpi-ft5_1.0.0.3	pollockpi-ft5_1.0.0.3
amd	athlon_3000_series_mobile_processors_with_radeon_graphics_dali_dali_ulp	—	—
amd	athlon_3000_series_mobile_processors_with_radeon_graphics_pollock	—	—
amd	ryzen_2000_series_desktop_processors_raven_ridge_am4	—	—
amd	ryzen_2000_series_mobile_processors_raven_ridge_fp5	—	—
amd	ryzen_3000_series_mobile_processors_with_radeon_graphics_renoir	—	—
amd	ryzen_3_3200u_firmware	< picassopi-fp5_1.0.0.d	picassopi-fp5_1.0.0.d
amd	ryzen_3_3250c_firmware	< picassopi-fp5_1.0.0.d	picassopi-fp5_1.0.0.d
amd	ryzen_3_3250u_firmware	< picassopi-fp5_1.0.0.d	picassopi-fp5_1.0.0.d
amd	ryzen_3_5300g_firmware	< cezannepi-fp6_1.0.0.8	cezannepi-fp6_1.0.0.8
amd	ryzen_3_5300ge_firmware	< cezannepi-fp6_1.0.0.8	cezannepi-fp6_1.0.0.8
amd	ryzen_3_5300u_firmware	< cezannepi-fp6_1.0.0.8	cezannepi-fp6_1.0.0.8
amd	ryzen_5000_series_desktop_processor_with_radeon_graphics_cezanne_am4	—	—
amd	ryzen_5000_series_mobile_processors_with_radeon_graphics_cezanne	—	—
amd	ryzen_5000_series_mobile_processors_with_radeon_graphics_lucienne	—	—
amd	ryzen_5_5500u_firmware	< cezannepi-fp6_1.0.0.8	cezannepi-fp6_1.0.0.8
amd	ryzen_5_5600g_firmware	< cezannepi-fp6_1.0.0.8	cezannepi-fp6_1.0.0.8
amd	ryzen_5_5600ge_firmware	< cezannepi-fp6_1.0.0.8	cezannepi-fp6_1.0.0.8
amd	ryzen_5_6600h_firmware	< rmb_1.0.0.4	rmb_1.0.0.4
amd	ryzen_5_6600hs_firmware	< rmb_1.0.0.4	rmb_1.0.0.4
amd	ryzen_5_6600u_firmware	< rmb_1.0.0.4	rmb_1.0.0.4
amd	ryzen_6000_series_mobile_processors_rembrandt	—	—
amd	ryzen_7_5700g_firmware	< cezannepi-fp6_1.0.0.8	cezannepi-fp6_1.0.0.8
amd	ryzen_7_5700ge_firmware	< cezannepi-fp6_1.0.0.8	cezannepi-fp6_1.0.0.8

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-125