7.8
High
CVE-2021-26391 Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker…
Description
Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the OS/kernel.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Radeon RX 5000 Series & PRO W5000 Series 22.10 | earliest → < 22.10.20 | 22.10.20 |
| AMD Radeon RX 5000 Series & PRO W5000 Series 22.5 | earliest → < 22.5.2 | 22.5.2 |
| AMD Radeon RX 5000 Series & PRO W5000 Series 22 | earliest → < 22.Q2 | 22.Q2 |
| AMD Radeon RX 6000 Series & PRO W6000 Series 22.10 | earliest → < 22.10.20 | 22.10.20 |
| AMD Radeon RX 6000 Series & PRO W6000 Series 22.5 | earliest → < 22.5.2 | 22.5.2 |
| AMD Radeon RX 6000 Series & PRO W6000 Series 22 | earliest → < 22.Q2 | 22.Q2 |
Other CVEs of AMD Radeon RX 5000 Series & PRO W5000 Series
The 5 CVEs of AMD Radeon RX 5000 Series & PRO W5000 Series →
CVE-2021-26392
Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially…
Not rated
CVE-2020-12930
Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their…
Not rated
CVE-2021-26393
Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an…
Not rated
CVE-2020-12931
Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their…
Not rated