CVE-2021-26346: AMD Ryzen 3 3100 Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.

Affected products

• AMD Ryzen 3 3100 Firmware: affected versions not specified
• AMD Ryzen 3 3200g Firmware: affected versions not specified
• AMD Ryzen 3 3200u Firmware: affected versions not specified
• AMD Ryzen 3 3250c Firmware: affected versions not specified
• AMD Ryzen 3 3250u Firmware: affected versions not specified
• AMD Ryzen 3 3300g Firmware: affected versions not specified
• AMD Ryzen 3 3300u Firmware: affected versions not specified
• AMD Ryzen 3 3300x Firmware: affected versions not specified
• AMD Ryzen 3 3350u Firmware: affected versions not specified
• AMD Ryzen 3 3450u Firmware: affected versions not specified
• AMD Ryzen 3 3500c Firmware: affected versions not specified
• AMD Ryzen 3 3500u Firmware: affected versions not specified
• AMD Ryzen 3 3550h Firmware: affected versions not specified
• AMD Ryzen 3 3580u Firmware: affected versions not specified
• AMD Ryzen 3 3700c Firmware: affected versions not specified
• AMD Ryzen 3 3700u Firmware: affected versions not specified
• AMD Ryzen 3 3750h Firmware: affected versions not specified
• AMD Ryzen 3 3780u Firmware: affected versions not specified
• AMD Ryzen 3 5125c Firmware: affected versions not specified
• AMD Ryzen 3 5300g Firmware: affected versions not specified
• AMD Ryzen 3 5300ge Firmware: affected versions not specified
• AMD Ryzen 3 5300u Firmware: affected versions not specified
• AMD Ryzen 3 5400u Firmware: affected versions not specified
• AMD Ryzen 3 5425c Firmware: affected versions not specified
• AMD Ryzen 3 5425u Firmware: affected versions not specified
• and 79 more

Published 2023-01-11. Last modified 2026-06-17.