CVE-2021-26386: AMD Ryzen 3 2200u Firmware

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially leading to corrupt memory and code execution.

Affected products

• AMD Ryzen 3 2200u Firmware: affected versions not specified
• AMD Ryzen 3 2300u Firmware: affected versions not specified
• AMD Ryzen 3 3100 Firmware: affected versions not specified
• AMD Ryzen 3 3300g Firmware: affected versions not specified
• AMD Ryzen 3 3300x Firmware: affected versions not specified
• AMD Ryzen 3 5125c Firmware: affected versions not specified
• AMD Ryzen 3 5400u Firmware: affected versions not specified
• AMD Ryzen 3 5425c Firmware: affected versions not specified
• AMD Ryzen 3 5425u Firmware: affected versions not specified
• AMD Ryzen 5300g Firmware: affected versions not specified
• AMD Ryzen 5300ge Firmware: affected versions not specified
• AMD Ryzen 5600g Firmware: affected versions not specified
• AMD Ryzen 5600ge Firmware: affected versions not specified
• AMD Ryzen 5600x Firmware: affected versions not specified
• AMD Ryzen 5700g Firmware: affected versions not specified
• AMD Ryzen 5700ge Firmware: affected versions not specified
• AMD Ryzen 5800x3d Firmware: affected versions not specified
• AMD Ryzen 5800x Firmware: affected versions not specified
• AMD Ryzen 5900x Firmware: affected versions not specified
• AMD Ryzen 5950x Firmware: affected versions not specified
• AMD Ryzen 5 2500u Firmware: affected versions not specified
• AMD Ryzen 5 2600 Firmware: affected versions not specified
• AMD Ryzen 5 2600h Firmware: affected versions not specified
• AMD Ryzen 5 2600x Firmware: affected versions not specified
• AMD Ryzen 5 3400g Firmware: affected versions not specified
• and 45 more

Published 2022-05-12. Last modified 2026-06-17.