CVE-2021-26390: AMD Athlon 300u Firmware

Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days.

A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to loss of integrity of data.

Affected products

• AMD Athlon 300u Firmware: affected versions not specified
• AMD Ryzen 3 3200u Firmware: affected versions not specified
• AMD Ryzen 3 3300u Firmware: affected versions not specified
• AMD Ryzen 3 5300g Firmware: affected versions not specified
• AMD Ryzen 3 5300ge Firmware: affected versions not specified
• AMD Ryzen 5 2600 Firmware: affected versions not specified
• AMD Ryzen 5 2600x Firmware: affected versions not specified
• AMD Ryzen 5 2700 Firmware: affected versions not specified
• AMD Ryzen 5 2700x Firmware: affected versions not specified
• AMD Ryzen 5 3500u Firmware: affected versions not specified
• AMD Ryzen 5 3550h Firmware: affected versions not specified
• AMD Ryzen 5 3600 Firmware: affected versions not specified
• AMD Ryzen 5 3600x Firmware: affected versions not specified
• AMD Ryzen 5 5600g Firmware: affected versions not specified
• AMD Ryzen 5 5600ge Firmware: affected versions not specified
• AMD Ryzen 5 5600x Firmware: affected versions not specified
• AMD Ryzen 7 3700u Firmware: affected versions not specified
• AMD Ryzen 7 3700x Firmware: affected versions not specified
• AMD Ryzen 7 3750h Firmware: affected versions not specified
• AMD Ryzen 7 3800x Firmware: affected versions not specified
• AMD Ryzen 7 5700g Firmware: affected versions not specified
• AMD Ryzen 7 5700ge Firmware: affected versions not specified
• AMD Ryzen 7 5800x Firmware: affected versions not specified
• AMD Ryzen 9 3900x Firmware: affected versions not specified
• AMD Ryzen 9 3950x Firmware: affected versions not specified
• and 12 more

Published 2022-05-10. Last modified 2026-06-17.