Skip to content
fr Sign in
Not rated

CVE-2021-26392 Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially…

Description

Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA.

Affected products and versions

Product Affected versions Fixed in
AMD Radeon RX 5000 Series & PRO W5000 Series 22.10 earliest → < 22.10.20 22.10.20
AMD Radeon RX 5000 Series & PRO W5000 Series 22.5 earliest → < 22.5.2 22.5.2
AMD Radeon RX 5000 Series & PRO W5000 Series 22 earliest → < 22.Q2 22.Q2
AMD Radeon RX 6000 Series & PRO W6000 Series 22.10 earliest → < 22.10.20 22.10.20
AMD Radeon RX 6000 Series & PRO W6000 Series 22.5 earliest → < 22.5.2 22.5.2
AMD Radeon RX 6000 Series & PRO W6000 Series 22 earliest → < 22.Q2 22.Q2
AMD Ryzen™ Embedded R1000 Versions not published
AMD Ryzen™ Embedded R2000 Versions not published
AMD Ryzen™ Embedded 5000 Versions not published
Show the 3 other branches
Product Affected versions Fixed in
AMD Ryzen™ Embedded V1000 Versions not published
AMD Ryzen™ Embedded V2000 Versions not published
AMD Ryzen™Embedded V3000 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of AMD Radeon RX 5000 Series & PRO W5000 Series

The 5 CVEs of AMD Radeon RX 5000 Series & PRO W5000 Series →
CVE-2020-12930 Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their… Not rated CVE-2021-26391 Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker… 7.8 High CVE-2021-26393 Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an… Not rated CVE-2020-12931 Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their… Not rated
Track this CVE