Out of Bounds Read Vulnerability in AMD Firmware
CVE-2021-26365
8.2HIGH
Key Information:
- Vendor
- Amd
- Status
- Vendor
- CVE Published:
- 9 May 2023
Summary
An issue exists in certain AMD firmware where improper handling of size values in binary headers may allow for out of bounds read vulnerabilities during the signature validation process. This flaw can lead to denial of service attacks, and potentially, unauthorized access to sensitive information from out-of-bounds memory, heightening the risk to affected systems and user data.
Affected Version(s)
Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock” x86 various
Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP x86 various
Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 x86 various
References
CVSS V3.1
Score:
8.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database