CVE Feed

    Dashboard / CVE / CVE-2021-26371

    CVE-2021-26371

    A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure.

    Published:May 9, 2023
    Last Modified:Jan 28, 2025
    EPS:May 9, 2023
    EPSS Score:0.00061
    CVSS Score:5.5

    Affected Products

    Vendor
    Amd
    Product
    Amd 3015ce
    Vendor
    Amd
    Product
    Amd 3015ce Firmware
    Vendor
    Amd
    Product
    Amd 3015e
    Vendor
    Amd
    Product
    Amd 3015e Firmware
    Vendor
    Amd
    Product
    Epyc 7001
    Vendor
    Amd
    Product
    Epyc 7001 Firmware
    Vendor
    Amd
    Product
    Epyc 7002
    Vendor
    Amd
    Product
    Epyc 7002 Firmware
    Vendor
    Amd
    Product
    Epyc 7003
    Vendor
    Amd
    Product
    Epyc 7003 Firmware
    Vendor
    Amd
    Product
    Epyc 7232p
    Vendor
    Amd
    Product
    Epyc 7232p Firmware
    Vendor
    Amd
    Product
    Epyc 7251
    Vendor
    Amd
    Product
    Epyc 7251 Firmware
    Vendor
    Amd
    Product
    Epyc 7252
    Vendor
    Amd
    Product
    Epyc 7252 Firmware
    Vendor
    Amd
    Product
    Epyc 7261
    Vendor
    Amd
    Product
    Epyc 7261 Firmware
    Vendor
    Amd
    Product
    Epyc 7262
    Vendor
    Amd
    Product
    Epyc 7262 Firmware
    Vendor
    Amd
    Product
    Epyc 7272
    Vendor
    Amd
    Product
    Epyc 7272 Firmware
    Vendor
    Amd
    Product
    Epyc 7281
    Vendor
    Amd
    Product
    Epyc 7281 Firmware
    Vendor
    Amd
    Product
    Epyc 7282
    Vendor
    Amd
    Product
    Epyc 7282 Firmware
    Vendor
    Amd
    Product
    Epyc 72f3
    Vendor
    Amd
    Product
    Epyc 72f3 Firmware
    Vendor
    Amd
    Product
    Epyc 7301
    Vendor
    Amd
    Product
    Epyc 7301 Firmware
    Vendor
    Amd
    Product
    Epyc 7302
    Vendor
    Amd
    Product
    Epyc 7302 Firmware
    Vendor
    Amd
    Product
    Epyc 7302p
    Vendor
    Amd
    Product
    Epyc 7302p Firmware
    Vendor
    Amd
    Product
    Epyc 7313
    Vendor
    Amd
    Product
    Epyc 7313 Firmware
    Vendor
    Amd
    Product
    Epyc 7313p
    Vendor
    Amd
    Product
    Epyc 7313p Firmware
    Vendor
    Amd
    Product
    Epyc 7343
    Vendor
    Amd
    Product
    Epyc 7343 Firmware
    Vendor
    Amd
    Product
    Epyc 7351
    Vendor
    Amd
    Product
    Epyc 7351 Firmware
    Vendor
    Amd
    Product
    Epyc 7351p
    Vendor
    Amd
    Product
    Epyc 7351p Firmware
    Vendor
    Amd
    Product
    Epyc 7352
    Vendor
    Amd
    Product
    Epyc 7352 Firmware
    Vendor
    Amd
    Product
    Epyc 7371
    Vendor
    Amd
    Product
    Epyc 7371 Firmware
    Vendor
    Amd
    Product
    Epyc 7373x
    Vendor
    Amd
    Product
    Epyc 7373x Firmware
    Vendor
    Amd
    Product
    Epyc 73f3
    Vendor
    Amd
    Product
    Epyc 73f3 Firmware
    Vendor
    Amd
    Product
    Epyc 7401
    Vendor
    Amd
    Product
    Epyc 7401 Firmware
    Vendor
    Amd
    Product
    Epyc 7401p
    Vendor
    Amd
    Product
    Epyc 7401p Firmware
    Vendor
    Amd
    Product
    Epyc 7402
    Vendor
    Amd
    Product
    Epyc 7402 Firmware
    Vendor
    Amd
    Product
    Epyc 7402p
    Vendor
    Amd
    Product
    Epyc 7402p Firmware
    Vendor
    Amd
    Product
    Epyc 7413
    Vendor
    Amd
    Product
    Epyc 7413 Firmware
    Vendor
    Amd
    Product
    Epyc 7443
    Vendor
    Amd
    Product
    Epyc 7443 Firmware
    Vendor
    Amd
    Product
    Epyc 7443p
    Vendor
    Amd
    Product
    Epyc 7443p Firmware
    Vendor
    Amd
    Product
    Epyc 7451
    Vendor
    Amd
    Product
    Epyc 7451 Firmware
    Vendor
    Amd
    Product
    Epyc 7452
    Vendor
    Amd
    Product
    Epyc 7452 Firmware
    Vendor
    Amd
    Product
    Epyc 7453
    Vendor
    Amd
    Product
    Epyc 7453 Firmware
    Vendor
    Amd
    Product
    Epyc 7473x
    Vendor
    Amd
    Product
    Epyc 7473x Firmware
    Vendor
    Amd
    Product
    Epyc 74f3
    Vendor
    Amd
    Product
    Epyc 74f3 Firmware
    Vendor
    Amd
    Product
    Epyc 7501
    Vendor
    Amd
    Product
    Epyc 7501 Firmware
    Vendor
    Amd
    Product
    Epyc 7502
    Vendor
    Amd
    Product
    Epyc 7502 Firmware
    Vendor
    Amd
    Product
    Epyc 7502p
    Vendor
    Amd
    Product
    Epyc 7502p Firmware
    Vendor
    Amd
    Product
    Epyc 7513
    Vendor
    Amd
    Product
    Epyc 7513 Firmware
    Vendor
    Amd
    Product
    Epyc 7532
    Vendor
    Amd
    Product
    Epyc 7532 Firmware
    Vendor
    Amd
    Product
    Epyc 7542
    Vendor
    Amd
    Product
    Epyc 7542 Firmware
    Vendor
    Amd
    Product
    Epyc 7543
    Vendor
    Amd
    Product
    Epyc 7543 Firmware
    Vendor
    Amd
    Product
    Epyc 7543p
    Vendor
    Amd
    Product
    Epyc 7543p Firmware
    Vendor
    Amd
    Product
    Epyc 7551
    Vendor
    Amd
    Product
    Epyc 7551 Firmware
    Vendor
    Amd
    Product
    Epyc 7551p
    Vendor
    Amd
    Product
    Epyc 7551p Firmware
    Vendor
    Amd
    Product
    Epyc 7552
    Vendor
    Amd
    Product
    Epyc 7552 Firmware
    Vendor
    Amd
    Product
    Epyc 7573x
    Vendor
    Amd
    Product
    Epyc 7573x Firmware
    Vendor
    Amd
    Product
    Epyc 75f3
    Vendor
    Amd
    Product
    Epyc 75f3 Firmware
    Vendor
    Amd
    Product
    Epyc 7601
    Vendor
    Amd
    Product
    Epyc 7601 Firmware
    Vendor
    Amd
    Product
    Epyc 7642
    Vendor
    Amd
    Product
    Epyc 7642 Firmware
    Vendor
    Amd
    Product
    Epyc 7643
    Vendor
    Amd
    Product
    Epyc 7643 Firmware
    Vendor
    Amd
    Product
    Epyc 7662
    Vendor
    Amd
    Product
    Epyc 7662 Firmware
    Vendor
    Amd
    Product
    Epyc 7663
    Vendor
    Amd
    Product
    Epyc 7663 Firmware
    Vendor
    Amd
    Product
    Epyc 7702
    Vendor
    Amd
    Product
    Epyc 7702 Firmware
    Vendor
    Amd
    Product
    Epyc 7702p
    Vendor
    Amd
    Product
    Epyc 7702p Firmware
    Vendor
    Amd
    Product
    Epyc 7713
    Vendor
    Amd
    Product
    Epyc 7713 Firmware
    Vendor
    Amd
    Product
    Epyc 7713p
    Vendor
    Amd
    Product
    Epyc 7713p Firmware
    Vendor
    Amd
    Product
    Epyc 7742
    Vendor
    Amd
    Product
    Epyc 7742 Firmware
    Vendor
    Amd
    Product
    Epyc 7763
    Vendor
    Amd
    Product
    Epyc 7763 Firmware
    Vendor
    Amd
    Product
    Epyc 7773x
    Vendor
    Amd
    Product
    Epyc 7773x Firmware
    Vendor
    Amd
    Product
    Epyc 7f32
    Vendor
    Amd
    Product
    Epyc 7f32 Firmware
    Vendor
    Amd
    Product
    Epyc 7f52
    Vendor
    Amd
    Product
    Epyc 7f52 Firmware
    Vendor
    Amd
    Product
    Epyc 7f72
    Vendor
    Amd
    Product
    Epyc 7f72 Firmware
    Vendor
    Amd
    Product
    Epyc 7h12
    Vendor
    Amd
    Product
    Epyc 7h12 Firmware
    Vendor
    Amd
    Product
    Ryzen 3 2200g
    Vendor
    Amd
    Product
    Ryzen 3 2200g Firmware
    Vendor
    Amd
    Product
    Ryzen 3 2200ge
    Vendor
    Amd
    Product
    Ryzen 3 2200ge Firmware
    Vendor
    Amd
    Product
    Ryzen 3 2200u
    Vendor
    Amd
    Product
    Ryzen 3 2200u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 2300u
    Vendor
    Amd
    Product
    Ryzen 3 2300u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 3100
    Vendor
    Amd
    Product
    Ryzen 3 3100 Firmware
    Vendor
    Amd
    Product
    Ryzen 3 3200u
    Vendor
    Amd
    Product
    Ryzen 3 3200u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 3250c
    Vendor
    Amd
    Product
    Ryzen 3 3250c Firmware
    Vendor
    Amd
    Product
    Ryzen 3 3250u
    Vendor
    Amd
    Product
    Ryzen 3 3250u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 3300u
    Vendor
    Amd
    Product
    Ryzen 3 3300u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 3300x
    Vendor
    Amd
    Product
    Ryzen 3 3300x Firmware
    Vendor
    Amd
    Product
    Ryzen 3 3350u
    Vendor
    Amd
    Product
    Ryzen 3 3350u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 Pro 2100ge
    Vendor
    Amd
    Product
    Ryzen 3 Pro 2100ge Firmware
    Vendor
    Amd
    Product
    Ryzen 5 2400g
    Vendor
    Amd
    Product
    Ryzen 5 2400g Firmware
    Vendor
    Amd
    Product
    Ryzen 5 2400ge
    Vendor
    Amd
    Product
    Ryzen 5 2400ge Firmware
    Vendor
    Amd
    Product
    Ryzen 5 2500u
    Vendor
    Amd
    Product
    Ryzen 5 2500u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 2600h
    Vendor
    Amd
    Product
    Ryzen 5 2600h Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3450u
    Vendor
    Amd
    Product
    Ryzen 5 3450u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3500
    Vendor
    Amd
    Product
    Ryzen 5 3500 Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3500c
    Vendor
    Amd
    Product
    Ryzen 5 3500c Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3500u
    Vendor
    Amd
    Product
    Ryzen 5 3500u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3500x
    Vendor
    Amd
    Product
    Ryzen 5 3500x Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3550h
    Vendor
    Amd
    Product
    Ryzen 5 3550h Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3580u
    Vendor
    Amd
    Product
    Ryzen 5 3580u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3600
    Vendor
    Amd
    Product
    Ryzen 5 3600 Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3600x
    Vendor
    Amd
    Product
    Ryzen 5 3600x Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3600xt
    Vendor
    Amd
    Product
    Ryzen 5 3600xt Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5500
    Vendor
    Amd
    Product
    Ryzen 5 5500 Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5600
    Vendor
    Amd
    Product
    Ryzen 5 5600 Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5600x
    Vendor
    Amd
    Product
    Ryzen 5 5600x Firmware
    Vendor
    Amd
    Product
    Ryzen 7 2700u
    Vendor
    Amd
    Product
    Ryzen 7 2700u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 2800h
    Vendor
    Amd
    Product
    Ryzen 7 2800h Firmware
    Vendor
    Amd
    Product
    Ryzen 7 3700c
    Vendor
    Amd
    Product
    Ryzen 7 3700c Firmware
    Vendor
    Amd
    Product
    Ryzen 7 3700u
    Vendor
    Amd
    Product
    Ryzen 7 3700u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 3700x
    Vendor
    Amd
    Product
    Ryzen 7 3700x Firmware
    Vendor
    Amd
    Product
    Ryzen 7 3750h
    Vendor
    Amd
    Product
    Ryzen 7 3750h Firmware
    Vendor
    Amd
    Product
    Ryzen 7 3780u
    Vendor
    Amd
    Product
    Ryzen 7 3780u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 3800x
    Vendor
    Amd
    Product
    Ryzen 7 3800x Firmware
    Vendor
    Amd
    Product
    Ryzen 7 3800xt
    Vendor
    Amd
    Product
    Ryzen 7 3800xt Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5700x
    Vendor
    Amd
    Product
    Ryzen 7 5700x Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5800
    Vendor
    Amd
    Product
    Ryzen 7 5800 Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5800x
    Vendor
    Amd
    Product
    Ryzen 7 5800x3d
    Vendor
    Amd
    Product
    Ryzen 7 5800x3d Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5800x Firmware
    Vendor
    Amd
    Product
    Ryzen 9 3900
    Vendor
    Amd
    Product
    Ryzen 9 3900 Firmware
    Vendor
    Amd
    Product
    Ryzen 9 3900x
    Vendor
    Amd
    Product
    Ryzen 9 3900x Firmware
    Vendor
    Amd
    Product
    Ryzen 9 3900xt
    Vendor
    Amd
    Product
    Ryzen 9 3900xt Firmware
    Vendor
    Amd
    Product
    Ryzen 9 3950x
    Vendor
    Amd
    Product
    Ryzen 9 3950x Firmware
    Vendor
    Amd
    Product
    Ryzen 9 5900
    Vendor
    Amd
    Product
    Ryzen 9 5900 Firmware
    Vendor
    Amd
    Product
    Ryzen 9 5900x
    Vendor
    Amd
    Product
    Ryzen 9 5900x Firmware
    Vendor
    Amd
    Product
    Ryzen 9 5950x
    Vendor
    Amd
    Product
    Ryzen 9 5950x Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper 3960x
    Vendor
    Amd
    Product
    Ryzen Threadripper 3960x Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper 3970x
    Vendor
    Amd
    Product
    Ryzen Threadripper 3970x Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper 3990x
    Vendor
    Amd
    Product
    Ryzen Threadripper 3990x Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3945wx
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3945wx Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3955wx
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3955wx Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3975wx
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3975wx Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3995wx
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3995wx Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 5945wx
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 5945wx Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 5955wx
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 5955wx Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 5965wx
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 5965wx Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 5975wx
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 5975wx Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 5995wx
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 5995wx Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-20521 (CVSS 3.3) — TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after m…
    CVE-2021-26365 (CVSS 8.2) — Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, …
    CVE-2021-26354 (CVSS 5.5) — Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which …
    CVE-2020-12930 (CVSS 7.8) — Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate …
    CVE-2021-26392 (CVSS 7.8) — Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially…
    CVE-2020-12931 (CVSS 7.8) — Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to eleva…
    CVE-2021-26393 (CVSS 5.5) — Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High