AMD Ryzen 3 Pro 2100ge Firmware vulnerabilities

3 CVEs affecting AMD Ryzen 3 Pro 2100ge Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-26371, published 2023-05-09.

More from AMD.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-26365, published 2023-05-09. High severity, CVSS 8.2. EPSS: 0.6% chance of exploitation in the next 30 days. Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information…
• CVE-2021-26371, published 2023-05-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information…
• CVE-2021-26354, published 2023-05-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initialized to zero, potentially leading to…