Skip to content
fr Sign in
Not rated

CVE-2021-26393 Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an…

Description

Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.

Affected products and versions

Product Affected versions Fixed in
AMD Radeon RX 5000 Series & PRO W5000 Series 22.10 earliest → < 22.10.20 22.10.20
AMD Radeon RX 5000 Series & PRO W5000 Series 22.5 earliest → < 22.5.2 22.5.2
AMD Radeon RX 5000 Series & PRO W5000 Series 22 earliest → < 22.Q2 22.Q2
AMD Radeon RX 6000 Series & PRO W6000 Series 22.10 earliest → < 22.10.20 22.10.20
AMD Radeon RX 6000 Series & PRO W6000 Series 22.5 earliest → < 22.5.2 22.5.2
AMD Radeon RX 6000 Series & PRO W6000 Series 22 earliest → < 22.Q2 22.Q2
AMD Ryzen™ Embedded R1000 Versions not published
AMD Ryzen™ Embedded R2000 Versions not published
AMD Ryzen™ Embedded V1000 Versions not published
Show the other branch
Product Affected versions Fixed in
AMD Ryzen™ Embedded V2000 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of AMD Radeon RX 5000 Series & PRO W5000 Series

The 5 CVEs of AMD Radeon RX 5000 Series & PRO W5000 Series →
CVE-2021-26392 Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially… Not rated CVE-2020-12930 Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their… Not rated CVE-2021-26391 Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker… 7.8 High CVE-2020-12931 Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their… Not rated
Track this CVE