ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-26361

—
CVSS 3.1
5.5 medium
EPSS
<1%p13
Published
()
Modified
Description

A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to information disclosure.

Vendors
amd
Products
radeon software, ryzen 3 2200u firmware, ryzen 3 2300u firmware, ryzen 3 5125c firmware, ryzen 3 5400u firmware, athlon 3050ge firmware, athlon 3150ge firmware, athlon 3150g firmware, ryzen 3 5425c firmware, ryzen 3 5425u firmware, ryzen 5 2500u firmware, ryzen 5 2600 firmware
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.