{"id":"CVE-2021-39298","revision":"42d84ced99e74ec09020fdf0ef392930","records":[{"revision":"42d84ced99e74ec09020fdf0ef392930","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2021-39298","aliases":[],"title":"A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security me…","description":"A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.","state":0,"publishedAt":"2022-02-16T16:38:10.726+00:00","modifiedAt":"2026-10-07T18:03:26.63+00:00","affected":[{"ecosystem":"Vendor product","name":"AGESA","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"defaultStatus\": \"unaffected\",\n                    \"packageName\": \"AGESA\",\n                    \"platforms\": [\n                        \"x86\"\n                    ],\n                    \"product\": \"2nd Gen EPYC\",\n                    \"vendor\": \"AMD\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"Various\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"AGESA","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"defaultStatus\": \"unaffected\",\n                    \"packageName\": \"AGESA\",\n                    \"platforms\": [\n                        \"x86\"\n                    ],\n                    \"product\": \"3rd Gen EPYC\",\n                    \"vendor\": \"AMD\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"various\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"AGESA","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"defaultStatus\": \"unaffected\",\n                    \"packageName\": \"AGESA\",\n                    \"platforms\": [\n                        \"x86\"\n                    ],\n                    \"product\": \"Ryzen 2000 Series\",\n                    \"vendor\": \"AMD\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"various\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"AGESA","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"defaultStatus\": \"unaffected\",\n                    \"packageName\": \"AGESA\",\n                    \"platforms\": [\n                        \"x86\"\n                    ],\n                    \"product\": \"Ryzen 3000 Series\",\n                    \"vendor\": \"AMD\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"Various\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"AGESA","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"defaultStatus\": \"unaffected\",\n                    \"packageName\": \"AGESA\",\n                    \"platforms\": [\n                        \"x86\"\n                    ],\n                    \"product\": \"Ryzen 5000 Series\",\n                    \"vendor\": \"AMD\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"various\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032","https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1027"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2021-39298","license":"CVE Program Terms of Use","key":"cve-program:CVE-2021-39298","identifiers":["CVE-2021-39298"]},"retained":false,"historicalAffected":[]}],"coverage":[]}