Out-of-bounds write in AMD Ryzen™ Series
Priority LOW 34CWE-787Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.
Summary
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially leading to corrupt memory and code execution.
Why it matters now
EPSS 0.00279 20th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| AMD | Ryzen™ Series | various | — | No fix listed | CNA |
| AMD | Athlon™ Series | various | — | No fix listed | CNA |
- Ryzen™ Series VendorAMD Affected various Fixed in — No fix listed CNA
- Athlon™ Series VendorAMD Affected various Fixed in — No fix listed CNA
CPE configurations NVD · 140
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:amd:ryzen_3_2200u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_2200u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_2300u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_2300u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3100_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3300g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3300g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3300x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3300x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:o:amd:ryzen_3_2200u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_2200u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_2300u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_2300u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3100_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3300g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3300g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3300x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3300x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Show 130 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:amd:ryzen_3_5125c_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5125c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_5400u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5400u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_5425c_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5425c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_5425u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5425u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5300g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5300g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5300ge_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5300ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5600g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5600g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5600ge_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5600ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5600x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5600x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5700g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5700g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5700ge_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5700ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5800x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5800x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5800x3d_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5800x3d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5900x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5900x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5950x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5950x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_2500u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_2500u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_2600_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_2600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_2600h_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_2600h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_2600x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_2600x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_3400g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_3400g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_3450g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_3450g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_3600_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_3600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_3600x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_3600x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5560u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5560u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600h_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600hs_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5625c_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5625c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5625u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5625u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5700g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5700g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5700ge_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5700ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_2700_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_2700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_2700u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_2700u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_2700x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_2700x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_2800h_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_2800h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_3700x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_3700x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_3800x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_3800x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5800h_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5800h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5800hs_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5800hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5800u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5800u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5825c_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5825c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5825u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5825u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_3900x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_3900x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_3950x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_3950x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_5900hs_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_5900hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_5900hx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_5900hx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_5980hs_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_5980hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_5980hx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_5980hx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_2920x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_2920x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_2950x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_2950x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_2970wx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_2970wx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_2990wx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_2990wx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_3960x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_3960x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_3970x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_3970x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_3990x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_3990x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_pro_3945wx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_pro_3945wx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_pro_3955wx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_pro_3955wx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_pro_3975wx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_pro_3975wx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_pro_3995wx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_pro_3995wx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_pro_5945wx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_pro_5945wx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_pro_5955wx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_pro_5955wx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_pro_5965wx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_pro_5965wx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_pro_5975wx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_pro_5975wx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_pro_5995wx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_pro_5995wx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:o:amd:ryzen_3_5125c_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5125c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_5400u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5400u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_5425c_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5425c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_5425u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5425u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5300g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5300g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5300ge_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5300ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5600g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5600g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5600ge_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5600ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5600x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5600x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5700g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5700g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5700ge_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5700ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5800x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5800x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5800x3d_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5800x3d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5900x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5900x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5950x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5950x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_2500u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_2500u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_2600_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_2600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_2600h_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_2600h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_2600x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_2600x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_3400g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_3400g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_3450g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_3450g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_3600_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_3600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_3600x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_3600x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5560u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5560u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600h_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600hs_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5625c_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5625c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5625u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5625u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5700g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5700g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5700ge_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5700ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_2700_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_2700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_2700u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_2700u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_2700x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_2700x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_2800h_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_2800h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_3700x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_3700x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_3800x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_3800x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5800h_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5800h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5800hs_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5800hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5800u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5800u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5825c_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5825c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5825u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5825u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_3900x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_3900x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_3950x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_3950x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_5900hs_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_5900hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_5900hx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_5900hx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_5980hs_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_5980hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_5980hx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_5980hx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_2920x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_2920x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_2950x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_2950x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_2970wx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_2970wx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_2990wx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_2990wx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_3960x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_3960x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_3970x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_3970x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_3990x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_3990x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_pro_3945wx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_pro_3945wx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_pro_3955wx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_pro_3955wx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_pro_3975wx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_pro_3975wx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_pro_3995wx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_pro_3995wx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_pro_5945wx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_pro_5945wx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_pro_5955wx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_pro_5955wx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_pro_5965wx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_pro_5965wx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_pro_5975wx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_pro_5975wx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_pro_5995wx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_pro_5995wx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-26386
- 2026-10-03 Alias added: GHSA-q5m8-56v3-xhv7
References
More AMD Ryzen 3 2200u Firmware vulnerabilities
- TI-2021-08189 Out-of-bounds read in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 CVSS 3.1HIGH 8.2
- TI-2023-07011 Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker… CVSS 3.1HIGH 8.8
- TI-2023-07010 Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to… CVSS 3.1HIGH 8.8
- TI-2022-12252 Mis-trained branch predictions for return instructions may allow arbitrary speculative… CVSS 3.1MEDIUM 6.5
- TI-2021-08144 Improper input validation in AMD Ryzen 5000 Series CVSS 3.1HIGH 7.8
- TI-2021-08213 Out-of-bounds write in AMD Radeon RX 5000 Series & PRO W5000 Series CVSS 3.1HIGH 7.8
Sources
- CVE-2021-26386 · CVE Program
- CVE-2021-26386 · NVD
- FIRST EPSS
- GHSA-q5m8-56v3-xhv7 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences