CVE-2021-26361: AMD Athlon 3050ge Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to information disclosure.

Affected products

• AMD Athlon 3050ge Firmware: affected versions not specified
• AMD Athlon 3150g Firmware: affected versions not specified
• AMD Athlon 3150ge Firmware: affected versions not specified
• AMD Radeon Software: affected versions not specified
• AMD Ryzen 3 2200u Firmware: affected versions not specified
• AMD Ryzen 3 2300u Firmware: affected versions not specified
• AMD Ryzen 3 5125c Firmware: affected versions not specified
• AMD Ryzen 3 5400u Firmware: affected versions not specified
• AMD Ryzen 3 5425c Firmware: affected versions not specified
• AMD Ryzen 3 5425u Firmware: affected versions not specified
• AMD Ryzen 5 2500u Firmware: affected versions not specified
• AMD Ryzen 5 2600 Firmware: affected versions not specified
• AMD Ryzen 5 2600h Firmware: affected versions not specified
• AMD Ryzen 5 2600x Firmware: affected versions not specified
• AMD Ryzen 5 5560u Firmware: affected versions not specified
• AMD Ryzen 5 5600h Firmware: affected versions not specified
• AMD Ryzen 5 5600hs Firmware: affected versions not specified
• AMD Ryzen 5 5600u Firmware: affected versions not specified
• AMD Ryzen 5 5600x Firmware: affected versions not specified
• AMD Ryzen 5 5625c Firmware: affected versions not specified
• AMD Ryzen 5 5625u Firmware: affected versions not specified
• AMD Ryzen 5 5700g Firmware: affected versions not specified
• AMD Ryzen 5 5700ge Firmware: affected versions not specified
• AMD Ryzen 7 2700 Firmware: affected versions not specified
• AMD Ryzen 7 2700u Firmware: affected versions not specified
• and 11 more

Published 2022-05-12. Last modified 2026-06-17.