CVE-2021-26387: AMD Athlon 3000 Series Desktop Processors With Radeon Graphics

Low severity, CVSS 3.9. EPSS: 0.1% chance of exploitation in the next 30 days.

Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell to map DRAM regions in protected areas, potentially leading to a loss of platform integrity.

Affected products

• AMD AMD Athlon 3000 Series Desktop Processors With Radeon Graphics
• AMD AMD Athlon 3000 Series Mobile Processors With Radeon Graphics
• AMD AMD Epyc 7001 Series Processors
• AMD AMD Epyc 7002 Series Processors
• AMD AMD Epyc 7003 Series Processors
• AMD AMD Epyc 9004 Series Processors
• AMD AMD Epyc Embedded 3000 Series Processors
• AMD AMD Epyc Embedded 7002 Series Processors
• AMD AMD Epyc Embedded 7003 Series Processors
• AMD AMD Epyc Embedded 9003 Series Processors
• AMD AMD Ryzen 3000 Series Desktop Processors
• AMD AMD Ryzen 3000 Series Mobile Processor With Radeon Graphics
• AMD AMD Ryzen 3000 Series Processors With Radeon Graphics
• AMD AMD Ryzen 4000 Series Desktop Processors With Radeon Graphics
• AMD AMD Ryzen 4000 Series Mobile Processors With Radeon Graphics
• AMD AMD Ryzen 5000 Series Desktop Processor With Radeon Graphics
• AMD AMD Ryzen 5000 Series Desktop Processors
• AMD AMD Ryzen 5000 Series Mobile Processors With Radeon Graphics
• AMD AMD Ryzen 5000 Series Processors With Radeon Graphics
• AMD AMD Ryzen 6000 Series Processors With Radeon Graphics
• AMD AMD Ryzen 7000 Series Desktop Processors
• AMD AMD Ryzen 7035 Series Processors With Radeon Graphics
• AMD AMD Ryzen Embedded 5000 Series Processors
• AMD AMD Ryzen Embedded r1000 Series Processors
• AMD AMD Ryzen Embedded r2000 Series Processors
• and 6 more

Published 2024-08-13. Last modified 2026-06-17.