Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-26365

No fix known EPSS <1%CVSS 8.2

Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information about out-of-bounds memory contents.

Published 2023-05-09 · CVE record · OSV

Products: AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4, AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, AMD Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5, Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”, AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir”, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, AMD Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”, AMD Ryzen™ 6000 Series Mobile Processors "Rembrandt"