Buffer overflow in AMD products - CVE-2021-26336
Published: May 26, 2022
Vulnerability identifier: #VU63736
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-26336
CWE-ID: CWE-119
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error in System Management Unit (SMU). A local user can trigger memory corruption and perform a denial of service (DoS) attack.
Affected software
AMD Ryzen 3000 Series Desktop processor
AMD Ryzen 5000 Series Desktop processor
3rd Gen AMD Ryzen Threadripper processors
AMD Ryzen Threadripper PRO processors
AMD Ryzen 5000 Series Desktop processor
3rd Gen AMD Ryzen Threadripper processors
AMD Ryzen Threadripper PRO processors
How to mitigate CVE-2021-26336
Install updates from vendor's website.