Out-of-bounds read in AMD Ryzen™ Series
Priority LOW 33CWE-125Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.
Summary
A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources.
Why it matters now
EPSS 0.00203 10th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| AMD | Ryzen™ Series | various | — | No fix listed | CNA |
| AMD | Athlon™ Series | various | — | No fix listed | CNA |
- Ryzen™ Series VendorAMD Affected various Fixed in — No fix listed CNA
- Athlon™ Series VendorAMD Affected various Fixed in — No fix listed CNA
CPE configurations NVD · 104
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:amd:ryzen_7_5700g_firmware:*:*:*:*:*:*:*:* | before comboam4_v2_pi_1.2.0.6c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5700g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5700ge_firmware:*:*:*:*:*:*:*:* | before comboam4_v2_pi_1.2.0.6c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5700ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600g_firmware:*:*:*:*:*:*:*:* | before comboam4_v2_pi_1.2.0.6c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600ge_firmware:*:*:*:*:*:*:*:* | before comboam4_v2_pi_1.2.0.6c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_5300g_firmware:*:*:*:*:*:*:*:* | before comboam4_v2_pi_1.2.0.6c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5300g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:o:amd:ryzen_7_5700g_firmware:*:*:*:*:*:*:*:* Versions before comboam4_v2_pi_1.2.0.6c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5700g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5700ge_firmware:*:*:*:*:*:*:*:* Versions before comboam4_v2_pi_1.2.0.6c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5700ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600g_firmware:*:*:*:*:*:*:*:* Versions before comboam4_v2_pi_1.2.0.6c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600ge_firmware:*:*:*:*:*:*:*:* Versions before comboam4_v2_pi_1.2.0.6c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_5300g_firmware:*:*:*:*:*:*:*:* Versions before comboam4_v2_pi_1.2.0.6c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5300g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Show 94 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:amd:ryzen_3_5300ge_firmware:*:*:*:*:*:*:*:* | before comboam4_v2_pi_1.2.0.6c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5300ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_5980hx_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_5980hx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_5980hs_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_5980hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5825u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5825u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_5900hx_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_5900hx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_5900hs_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_5900hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5825c_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5825c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5800h_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5800h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5625u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5625u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5800hs_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5800hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5625c_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5625c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600h_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600hs_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5800u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5800u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5560u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5560u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_5425u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5425u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_5425c_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5425c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_5400u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5400u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_5125c_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5125c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:athlon_silver_3050u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:athlon_silver_3050u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:athlon_gold_3150u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:athlon_gold_3150u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3200u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3200u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3250u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3250u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3300u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3300u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3350u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3350u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3450u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3450u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3500u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3500u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3500c_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3500c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3550h_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3550h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3580u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3580u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3700u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3700u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3700c_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3700c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3750h_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3750h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3780u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3780u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_2200u_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.6c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_2200u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_2300u_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.6c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_2300u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_2500u_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.6c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_2500u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_2600_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.6c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_2600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_2600h_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.6c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_2600h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_2600x_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.6c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_2600x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_2700_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.6c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_2700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_2700x_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.6c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_2700x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_2700_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.6c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_2700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_2700u_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.6c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_2700u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_2700x_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.6c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_2700x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_2800h_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.6c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_2800h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:o:amd:ryzen_3_5300ge_firmware:*:*:*:*:*:*:*:* Versions before comboam4_v2_pi_1.2.0.6c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5300ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_5980hx_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_5980hx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_5980hs_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_5980hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5825u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5825u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_5900hx_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_5900hx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_5900hs_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_5900hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5825c_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5825c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5800h_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5800h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5625u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5625u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5800hs_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5800hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5625c_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5625c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600h_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600hs_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5800u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5800u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5560u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5560u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_5425u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5425u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_5425c_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5425c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_5400u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5400u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_5125c_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5125c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:athlon_silver_3050u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:athlon_silver_3050u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:athlon_gold_3150u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:athlon_gold_3150u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3200u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3200u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3250u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3250u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3300u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3300u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3350u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3350u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3450u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3450u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3500u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3500u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3500c_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3500c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3550h_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3550h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3580u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3580u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3700u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3700u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3700c_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3700c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3750h_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3750h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3780u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3780u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_2200u_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.6c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_2200u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_2300u_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.6c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_2300u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_2500u_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.6c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_2500u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_2600_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.6c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_2600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_2600h_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.6c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_2600h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_2600x_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.6c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_2600x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_2700_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.6c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_2700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_2700x_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.6c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_2700x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_2700_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.6c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_2700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_2700u_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.6c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_2700u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_2700x_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.6c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_2700x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_2800h_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.6c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_2800h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-26384
- 2026-10-03 Alias added: GHSA-cqhp-pw9h-ff47
References
More AMD Athlon Gold 3150u Firmware vulnerabilities
- TI-2023-07011 Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker… CVSS 3.1HIGH 8.8
- TI-2023-07010 Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to… CVSS 3.1HIGH 8.8
- TI-2022-07835 Out-of-bounds write in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics CVSS 3.1HIGH 8.2
- TI-2023-07008 Out-of-bounds write in AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 CVSS 3.1HIGH 7.8
- TI-2022-12252 Mis-trained branch predictions for return instructions may allow arbitrary speculative… CVSS 3.1MEDIUM 6.5
- TI-2021-08144 Improper input validation in AMD Ryzen 5000 Series CVSS 3.1HIGH 7.8
Sources
- CVE-2021-26384 · CVE Program
- CVE-2021-26384 · NVD
- FIRST EPSS
- GHSA-cqhp-pw9h-ff47 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences