NetSight
high7.8

CVE-2021-26391

Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution i…

Impact

Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the OS/kernel.

Affected products

VendorProductAffected versions
AmdEnterprise Driver
before 22.10.20
AmdRadeon Pro Software
before 22.q2
AmdRadeon Software
before 22.5.2
AmdRadeon Rx Vega 56 Firmware
All versions
AmdRadeon Rx Vega 64 Firmware
All versions
AmdRyzen 3 5300ge Firmware
All versions
AmdRyzen 3 5300g Firmware
All versions
AmdRyzen 5 5600ge Firmware
All versions
AmdRyzen 5 5600g Firmware
All versions
AmdRyzen 7 5700ge Firmware
All versions
AmdRyzen 7 5700g Firmware
All versions
AmdRyzen 3 5300u Firmware
All versions

Weakness classification

References