CVE-2021-26317: AMD Athlon 3050ge Firmware

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution.

Affected products

• AMD Athlon 3050ge Firmware: affected versions not specified
• AMD Athlon 3150g Firmware: affected versions not specified
• AMD Athlon 3150ge Firmware: affected versions not specified
• AMD Radeon Software: affected versions not specified
• AMD Ryzen 3 2200u Firmware: affected versions not specified
• AMD Ryzen 3 2300u Firmware: affected versions not specified
• AMD Ryzen 3 3100 Firmware: affected versions not specified
• AMD Ryzen 3 3300g Firmware: affected versions not specified
• AMD Ryzen 3 3300x Firmware: affected versions not specified
• AMD Ryzen 3 5125c Firmware: affected versions not specified
• AMD Ryzen 3 5400u Firmware: affected versions not specified
• AMD Ryzen 3 5425c Firmware: affected versions not specified
• AMD Ryzen 3 5425u Firmware: affected versions not specified
• AMD Ryzen 5300g Firmware: affected versions not specified
• AMD Ryzen 5300ge Firmware: affected versions not specified
• AMD Ryzen 5600g Firmware: affected versions not specified
• AMD Ryzen 5600ge Firmware: affected versions not specified
• AMD Ryzen 5600x Firmware: affected versions not specified
• AMD Ryzen 5700g Firmware: affected versions not specified
• AMD Ryzen 5700ge Firmware: affected versions not specified
• AMD Ryzen 5800x3d Firmware: affected versions not specified
• AMD Ryzen 5800x Firmware: affected versions not specified
• AMD Ryzen 5900x Firmware: affected versions not specified
• AMD Ryzen 5950x Firmware: affected versions not specified
• AMD Ryzen 5 2500u Firmware: affected versions not specified
• and 49 more

Published 2022-05-12. Last modified 2026-06-17.