{"id":"CVE-2021-26354","aliases":["EUVD-2021-13160","GHSA-v3h7-q6cc-vp5h"],"status":"published","title":"Insufficient bounds checking in ASP may allow an\nattacker to issue a system call from a...","description":"Insufficient bounds checking in ASP may allow an\nattacker to issue a system call from a compromised ABL which may cause\narbitrary memory values to be initialized to zero, potentially leading to a\nloss of integrity.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00178,"percentile":0.07426,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120"],"published":"2023-05-09T18:58:37Z","modified":"2026-06-17T03:43:12Z","products":[{"vendor":"amd","product":"2nd gen amd epyc™ processors"},{"vendor":"amd","product":"2nd gen amd ryzen™ threadripper™ processors “colfax”"},{"vendor":"amd","product":"3rd gen amd epyc™ processors"},{"vendor":"amd","product":"3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt"},{"vendor":"amd","product":"amd ryzen™ 5000 series desktop processors “vermeer” am4"},{"vendor":"amd","product":"amd_3015ce_firmware"},{"vendor":"amd","product":"amd_3015e_firmware"},{"vendor":"amd","product":"athlon™ 3000 series mobile processors with radeon™ graphics   “pollock”"},{"vendor":"amd","product":"athlon™ 3000 series mobile processors with radeon™ graphics “dali”/”dali” ulp"},{"vendor":"amd","product":"epyc_7002_firmware"},{"vendor":"amd","product":"epyc_7003_firmware"},{"vendor":"amd","product":"epyc_7232p_firmware"},{"vendor":"amd","product":"epyc_7252_firmware"},{"vendor":"amd","product":"epyc_7262_firmware"},{"vendor":"amd","product":"epyc_7272_firmware"},{"vendor":"amd","product":"epyc_7282_firmware"},{"vendor":"amd","product":"epyc_72f3_firmware"},{"vendor":"amd","product":"epyc_7302_firmware"},{"vendor":"amd","product":"epyc_7302p_firmware"},{"vendor":"amd","product":"epyc_7313_firmware"},{"vendor":"amd","product":"epyc_7313p_firmware"},{"vendor":"amd","product":"epyc_7343_firmware"},{"vendor":"amd","product":"epyc_7352_firmware"},{"vendor":"amd","product":"epyc_7373x_firmware"},{"vendor":"amd","product":"epyc_73f3_firmware"},{"vendor":"amd","product":"epyc_7402_firmware"},{"vendor":"amd","product":"epyc_7402p_firmware"},{"vendor":"amd","product":"epyc_7413_firmware"},{"vendor":"amd","product":"epyc_7443_firmware"},{"vendor":"amd","product":"epyc_7443p_firmware"},{"vendor":"amd","product":"epyc_7452_firmware"},{"vendor":"amd","product":"epyc_7453_firmware"},{"vendor":"amd","product":"epyc_7473x_firmware"},{"vendor":"amd","product":"epyc_74f3_firmware"},{"vendor":"amd","product":"epyc_7502_firmware"},{"vendor":"amd","product":"epyc_7502p_firmware"},{"vendor":"amd","product":"epyc_7513_firmware"},{"vendor":"amd","product":"epyc_7532_firmware"},{"vendor":"amd","product":"epyc_7542_firmware"},{"vendor":"amd","product":"epyc_7543_firmware"},{"vendor":"amd","product":"epyc_7543p_firmware"},{"vendor":"amd","product":"epyc_7552_firmware"},{"vendor":"amd","product":"epyc_7573x_firmware"},{"vendor":"amd","product":"epyc_75f3_firmware"},{"vendor":"amd","product":"epyc_7642_firmware"},{"vendor":"amd","product":"epyc_7643_firmware"},{"vendor":"amd","product":"epyc_7662_firmware"},{"vendor":"amd","product":"epyc_7663_firmware"},{"vendor":"amd","product":"epyc_7702_firmware"},{"vendor":"amd","product":"epyc_7702p_firmware"},{"vendor":"amd","product":"epyc_7713_firmware"},{"vendor":"amd","product":"epyc_7713p_firmware"},{"vendor":"amd","product":"epyc_7742_firmware"},{"vendor":"amd","product":"epyc_7763_firmware"},{"vendor":"amd","product":"epyc_7773x_firmware"},{"vendor":"amd","product":"epyc_7f32_firmware"},{"vendor":"amd","product":"epyc_7f52_firmware"},{"vendor":"amd","product":"epyc_7f72_firmware"},{"vendor":"amd","product":"epyc_7h12_firmware"},{"vendor":"amd","product":"ryzen_3_1200_af_firmware"},{"vendor":"amd","product":"ryzen_3_2200g_firmware"},{"vendor":"amd","product":"ryzen_3_2200ge_firmware"},{"vendor":"amd","product":"ryzen_3_2200u_firmware"},{"vendor":"amd","product":"ryzen_3_2300u_firmware"},{"vendor":"amd","product":"ryzen_3_2300x_firmware"},{"vendor":"amd","product":"ryzen_3_3100_firmware"},{"vendor":"amd","product":"ryzen_3_3200u_firmware"},{"vendor":"amd","product":"ryzen_3_3250c_firmware"},{"vendor":"amd","product":"ryzen_3_3250u_firmware"},{"vendor":"amd","product":"ryzen_3_3300u_firmware"},{"vendor":"amd","product":"ryzen_3_3300x_firmware"},{"vendor":"amd","product":"ryzen_3_3350u_firmware"},{"vendor":"amd","product":"ryzen_3_5125c_firmware"},{"vendor":"amd","product":"ryzen_3_5300g_firmware"},{"vendor":"amd","product":"ryzen_3_5300ge_firmware"},{"vendor":"amd","product":"ryzen_3_5300u_firmware"},{"vendor":"amd","product":"ryzen_3_5400u_firmware"},{"vendor":"amd","product":"ryzen_3_5425u_firmware"},{"vendor":"amd","product":"ryzen_3_pro_2100ge_firmware"},{"vendor":"amd","product":"ryzen_5_1600_af_firmware"},{"vendor":"amd","product":"ryzen_5_2400g_firmware"},{"vendor":"amd","product":"ryzen_5_2400ge_firmware"},{"vendor":"amd","product":"ryzen_5_2500u_firmware"},{"vendor":"amd","product":"ryzen_5_2500x_firmware"},{"vendor":"amd","product":"ryzen_5_2600_firmware"},{"vendor":"amd","product":"ryzen_5_2600e_firmware"},{"vendor":"amd","product":"ryzen_5_2600h_firmware"},{"vendor":"amd","product":"ryzen_5_2600x_firmware"},{"vendor":"amd","product":"ryzen_5_3450u_firmware"},{"vendor":"amd","product":"ryzen_5_3500_firmware"},{"vendor":"amd","product":"ryzen_5_3500c_firmware"},{"vendor":"amd","product":"ryzen_5_3500u_firmware"},{"vendor":"amd","product":"ryzen_5_3500x_firmware"},{"vendor":"amd","product":"ryzen_5_3550h_firmware"},{"vendor":"amd","product":"ryzen_5_3580u_firmware"},{"vendor":"amd","product":"ryzen_5_3600_firmware"},{"vendor":"amd","product":"ryzen_5_3600x_firmware"},{"vendor":"amd","product":"ryzen_5_3600xt_firmware"},{"vendor":"amd","product":"ryzen_5_5500_firmware"},{"vendor":"amd","product":"ryzen_5_5500u_firmware"},{"vendor":"amd","product":"ryzen_5_5560u_firmware"},{"vendor":"amd","product":"ryzen_5_5600_firmware"},{"vendor":"amd","product":"ryzen_5_5600g_firmware"},{"vendor":"amd","product":"ryzen_5_5600ge_firmware"},{"vendor":"amd","product":"ryzen_5_5600h_firmware"},{"vendor":"amd","product":"ryzen_5_5600hs_firmware"},{"vendor":"amd","product":"ryzen_5_5600u_firmware"},{"vendor":"amd","product":"ryzen_5_5600x_firmware"},{"vendor":"amd","product":"ryzen_5_5625u_firmware"},{"vendor":"amd","product":"ryzen_7_2700_firmware"},{"vendor":"amd","product":"ryzen_7_2700e_firmware"},{"vendor":"amd","product":"ryzen_7_2700u_firmware"},{"vendor":"amd","product":"ryzen_7_2700x_firmware"},{"vendor":"amd","product":"ryzen_7_2800h_firmware"},{"vendor":"amd","product":"ryzen_7_3700c_firmware"},{"vendor":"amd","product":"ryzen_7_3700u_firmware"},{"vendor":"amd","product":"ryzen_7_3700x_firmware"},{"vendor":"amd","product":"ryzen_7_3750h_firmware"},{"vendor":"amd","product":"ryzen_7_3780u_firmware"},{"vendor":"amd","product":"ryzen_7_3800x_firmware"},{"vendor":"amd","product":"ryzen_7_3800xt_firmware"},{"vendor":"amd","product":"ryzen_7_5700g_firmware"},{"vendor":"amd","product":"ryzen_7_5700ge_firmware"},{"vendor":"amd","product":"ryzen_7_5700u_firmware"},{"vendor":"amd","product":"ryzen_7_5700x_firmware"},{"vendor":"amd","product":"ryzen_7_5800_firmware"},{"vendor":"amd","product":"ryzen_7_5800h_firmware"},{"vendor":"amd","product":"ryzen_7_5800hs_firmware"},{"vendor":"amd","product":"ryzen_7_5800u_firmware"},{"vendor":"amd","product":"ryzen_7_5800x3d_firmware"},{"vendor":"amd","product":"ryzen_7_5800x_firmware"},{"vendor":"amd","product":"ryzen_7_5825u_firmware"},{"vendor":"amd","product":"ryzen_9_3900_firmware"},{"vendor":"amd","product":"ryzen_9_3900x_firmware"},{"vendor":"amd","product":"ryzen_9_3900xt_firmware"},{"vendor":"amd","product":"ryzen_9_3950x_firmware"},{"vendor":"amd","product":"ryzen_9_5900_firmware"},{"vendor":"amd","product":"ryzen_9_5900hs_firmware"},{"vendor":"amd","product":"ryzen_9_5900hx_firmware"},{"vendor":"amd","product":"ryzen_9_5900x_firmware"},{"vendor":"amd","product":"ryzen_9_5950x_firmware"},{"vendor":"amd","product":"ryzen_9_5980hs_firmware"},{"vendor":"amd","product":"ryzen_9_5980hx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_2920x_firmware"},{"vendor":"amd","product":"ryzen_threadripper_2950x_firmware"},{"vendor":"amd","product":"ryzen_threadripper_2970wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_2990wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_3960x_firmware"},{"vendor":"amd","product":"ryzen_threadripper_3970x_firmware"},{"vendor":"amd","product":"ryzen_threadripper_3990x_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_3945wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_3955wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_3975wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_3995wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_5945wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_5955wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_5965wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_5975wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_5995wx_firmware"},{"vendor":"amd","product":"ryzen™ 2000 series desktop processors “pinnacle ridge”"},{"vendor":"amd","product":"ryzen™ 2000 series desktop processors “raven ridge” am4"},{"vendor":"amd","product":"ryzen™ 2000 series mobile processors “raven ridge” fp5"},{"vendor":"amd","product":"ryzen™ 3000 series desktop processors “matisse” am4"},{"vendor":"amd","product":"ryzen™ 3000 series mobile processor, 2nd gen amd ryzen™ mobile processors with radeon™ graphics “picasso”"},{"vendor":"amd","product":"ryzen™ 3000 series mobile processors with radeon™ graphics “renoir”"},{"vendor":"amd","product":"ryzen™ 5000 series desktop processor with radeon™ graphics  “cezanne” am4"},{"vendor":"amd","product":"ryzen™ 5000 series mobile processors with radeon™ graphics “cezanne”"},{"vendor":"amd","product":"ryzen™ 5000 series mobile processors with radeon™ graphics “lucienne”"},{"vendor":"amd","product":"ryzen™ threadripper™ pro processors “castle peak” ws"},{"vendor":"amd","product":"ryzen™ threadripper™ pro processors “chagall” ws"}],"references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-26354"},{"url":"https://github.com/advisories/GHSA-v3h7-q6cc-vp5h"}],"sources":{"cve":[{"id":"CVE-2021-26354","description":"Insufficient bounds checking in ASP may allow an\nattacker to issue a system call from a compromised ABL which may cause\narbitrary memory values to be initialized to zero, potentially leading to a\nloss of integrity.\n\n\n\n\n","status":"published","published":"2023-05-09T18:58:37.664Z","modified":"2025-01-28T15:50:35.057Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:32:57.033395Z"}],"euvd":[{"id":"EUVD-2021-13160","description":"Insufficient bounds checking in ASP may allow an\nattacker to issue a system call from a compromised ABL which may cause\narbitrary memory values to be initialized to zero, potentially leading to a\nloss of integrity.\n\n\n\n\n","status":"published","published":"2023-05-09T18:58:37Z","modified":"2025-01-28T15:50:35Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:11.814906Z"}],"ghsa":[{"id":"GHSA-v3h7-q6cc-vp5h","title":"Insufficient bounds checking in ASP may allow an\nattacker to issue a system call from a...","description":"Insufficient bounds checking in ASP may allow an\nattacker to issue a system call from a compromised ABL which may cause\narbitrary memory values to be initialized to zero, potentially leading to a\nloss of integrity.\n\n\n\n\n","status":"published","published":"2023-05-09T21:30:22Z","modified":"2024-04-11T21:02:48Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:57:06.434267Z"}],"nvd":[{"id":"CVE-2021-26354","description":"Insufficient bounds checking in ASP may allow an\nattacker to issue a system call from a compromised ABL which may cause\narbitrary memory values to be initialized to zero, potentially leading to a\nloss of integrity.\n\n\n\n\n","status":"published","published":"2023-05-09T19:15:10.67Z","modified":"2026-06-17T03:43:12.993Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:07:07.764332Z"}]}}