medium5.5
CVE-2021-26393
Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to genera…
Impact
Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Enterprise Driver | before 22.10.20 |
| Amd | Radeon Pro Software | before 22.q2 |
| Amd | Radeon Software | before 22.5.2 |
| Amd | Radeon Rx Vega 56 Firmware | All versions |
| Amd | Radeon Rx Vega 64 Firmware | All versions |
| Amd | Ryzen 3 2200ge Firmware | All versions |
| Amd | Ryzen 3 2200g Firmware | All versions |
| Amd | Ryzen 5 2400ge Firmware | All versions |
| Amd | Ryzen 5 2400g Firmware | All versions |
| Amd | Ryzen 3 5300ge Firmware | All versions |
| Amd | Ryzen 3 5300g Firmware | All versions |
| Amd | Ryzen 5 5600ge Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-5001
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-5001