CVE-2021-26363: AMD Radeon Software

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenced area, potentially leading to data exposure.

Affected products

• AMD Radeon Software: affected versions not specified
• AMD Ryzen 3 3100 Firmware: affected versions not specified
• AMD Ryzen 3 3300g Firmware: affected versions not specified
• AMD Ryzen 3 3300x Firmware: affected versions not specified
• AMD Ryzen 3 5125c Firmware: affected versions not specified
• AMD Ryzen 3 5400u Firmware: affected versions not specified
• AMD Ryzen 3 5425c Firmware: affected versions not specified
• AMD Ryzen 3 5425u Firmware: affected versions not specified
• AMD Ryzen 5 3400g Firmware: affected versions not specified
• AMD Ryzen 5 3450g Firmware: affected versions not specified
• AMD Ryzen 5 3600 Firmware: affected versions not specified
• AMD Ryzen 5 3600x Firmware: affected versions not specified
• AMD Ryzen 5 5560u Firmware: affected versions not specified
• AMD Ryzen 5 5600h Firmware: affected versions not specified
• AMD Ryzen 5 5600hs Firmware: affected versions not specified
• AMD Ryzen 5 5600u Firmware: affected versions not specified
• AMD Ryzen 5 5600x Firmware: affected versions not specified
• AMD Ryzen 5 5625c Firmware: affected versions not specified
• AMD Ryzen 5 5625u Firmware: affected versions not specified
• AMD Ryzen 5 5700g Firmware: affected versions not specified
• AMD Ryzen 5 5700ge Firmware: affected versions not specified
• AMD Ryzen 7 3700x Firmware: affected versions not specified
• AMD Ryzen 7 3800x Firmware: affected versions not specified
• AMD Ryzen 7 5800h Firmware: affected versions not specified
• AMD Ryzen 7 5800hs Firmware: affected versions not specified
• and 9 more

Published 2022-05-12. Last modified 2026-06-17.