CVE-2021-26356
Published: May 9, 2023
Modified: Jan 28, 2025
Description
A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure.
| Vendor | Product | Versions |
|---|---|---|
AMD | Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 | affected various |
AMD | AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4 | affected various |
AMD | 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT | affected various |
AMD | Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS | affected various |
AMD | Ryzen™ Threadripper™ PRO Processors “Chagall” WS | affected various |
AMD | 1st Gen AMD EPYC™ Processors | affected various |
AMD | 2nd Gen AMD EPYC™ Processors | affected various |
AMD | 3rd Gen AMD EPYC™ Processors | affected various |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now