7.8
High
CVE-2021-26360 An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC…
Description
An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Radeon RX 6000 Series & PRO W6000 Series 22.10 | earliest → < 22.10.20 | 22.10.20 |
| AMD Radeon RX 6000 Series & PRO W6000 Series 22.5 | earliest → < 22.5.2 | 22.5.2 |
| AMD Radeon RX 6000 Series & PRO W6000 Series 22 | earliest → < 22.Q2 | 22.Q2 |
Other CVEs of AMD Radeon RX 6000 Series & PRO W6000 Series
The 4 CVEs of AMD Radeon RX 6000 Series & PRO W6000 Series →
CVE-2021-26392
Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially…
Not rated
CVE-2021-26391
Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker…
7.8
High
CVE-2021-26393
Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an…
Not rated