CVE-2021-26368: AMD Ryzen 3 2200u Firmware

Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days.

Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser privileged process to unmap memory owned by a higher privileged process resulting in a denial of service.

Affected products

• AMD Ryzen 3 2200u Firmware: affected versions not specified
• AMD Ryzen 3 2300u Firmware: affected versions not specified
• AMD Ryzen 3 3100 Firmware: affected versions not specified
• AMD Ryzen 3 3300g Firmware: affected versions not specified
• AMD Ryzen 3 3300x Firmware: affected versions not specified
• AMD Ryzen 3 5125c Firmware: affected versions not specified
• AMD Ryzen 3 5400u Firmware: affected versions not specified
• AMD Ryzen 3 5425c Firmware: affected versions not specified
• AMD Ryzen 3 5425u Firmware: affected versions not specified
• AMD Ryzen 5300g Firmware: affected versions not specified
• AMD Ryzen 5300ge Firmware: affected versions not specified
• AMD Ryzen 5600g Firmware: affected versions not specified
• AMD Ryzen 5600ge Firmware: affected versions not specified
• AMD Ryzen 5600x Firmware: affected versions not specified
• AMD Ryzen 5700g Firmware: affected versions not specified
• AMD Ryzen 5700ge Firmware: affected versions not specified
• AMD Ryzen 5800x3d Firmware: affected versions not specified
• AMD Ryzen 5800x Firmware: affected versions not specified
• AMD Ryzen 5900x Firmware: affected versions not specified
• AMD Ryzen 5950x Firmware: affected versions not specified
• AMD Ryzen 5 2500u Firmware: affected versions not specified
• AMD Ryzen 5 2600 Firmware: affected versions not specified
• AMD Ryzen 5 2600h Firmware: affected versions not specified
• AMD Ryzen 5 2600x Firmware: affected versions not specified
• AMD Ryzen 5 3400g Firmware: affected versions not specified
• and 45 more

Published 2022-05-12. Last modified 2026-06-17.