CVE-2021-26317

CVE-2021-26317: vulnerability in AMD Athlon™ Series

Published · Updated

Follow this CVE+ Monitor Athlon™ Series+ Monitor Ryzen™ Series

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.3%
Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution.
Affected products
AMD · Athlon™ SeriesAMD · Ryzen™ Series
Related CVEs — AMD Athlon™ Series

In the same product, most dangerous first.

CVE-2020-12944—CVE-2020-12944EPSS 0.3%CVE-2021-26335—CVE-2021-26335EPSS 0.3%CVE-2021-26386—CVE-2021-26386EPSS 0.3%CVE-2021-26339—CVE-2021-26339EPSS 0.3%CVE-2021-26312—CVE-2021-26312EPSS 0.2%CVE-2021-26337—CVE-2021-26337EPSS 0.2%