CVEvulnerability

CVE-2021-26393

5.5 MEDIUM Published 2022-11-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-11-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-401

Description

Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.

Affected configurations

• amd enterprise driver (< 22.10.20) • amd radeon pro software (< 22.q2) • amd radeon software (< 22.5.2) • amd radeon rx vega 56 firmware • amd radeon rx vega 64 firmware • amd ryzen 3 2200ge firmware • amd ryzen 3 2200g firmware • amd ryzen 5 2400ge firmware • amd ryzen 5 2400g firmware • amd ryzen 3 5300ge firmware • amd ryzen 3 5300g firmware • amd ryzen 5 5600ge firmware • amd ryzen 5 5600g firmware • amd ryzen 7 5700ge firmware • amd ryzen 7 5700g firmware • amd athlon silver 3050e firmware • amd athlon pro 3045b firmware • amd athlon silver 3050u firmware • amd athlon silver 3050c firmware • amd athlon pro 3145b firmware • amd athlon gold 3150u firmware • amd athlon gold 3150c firmware • amd ryzen 3 3250u firmware • amd ryzen 3 3250c firmware • amd amd 3020e firmware • amd amd 3015e firmware • amd amd 3015ce firmware • amd ryzen 3 2200u firmware • amd ryzen 3 2300u firmware • amd ryzen 5 2500u firmware • amd ryzen 5 2600h firmware • amd ryzen 7 2700u firmware • amd ryzen 7 2800h firmware • amd ryzen 3 3300u firmware • amd ryzen 3 3350u firmware • amd ryzen 5 3450u firmware • amd ryzen 5 3500u firmware • amd ryzen 5 3500c firmware • amd ryzen 5 3550h firmware • amd ryzen 5 3580u firmware • amd ryzen 7 3700u firmware • amd ryzen 7 3700c firmware • amd ryzen 7 3750h firmware • amd ryzen 7 3780u firmware • amd ryzen 3 pro 3200ge firmware • amd ryzen 3 3200g firmware • amd ryzen 3 pro 3200g firmware • amd ryzen 5 pro 3350ge firmware • amd ryzen 5 pro 3350g firmware • amd ryzen 5 pro 3400ge firmware • amd ryzen 5 pro 3400g firmware • amd ryzen 5 3400g firmware • amd ryzen 3 5300u firmware • amd ryzen 5 5500u firmware • amd ryzen 7 5700u firmware • amd ryzen 3 5400u firmware • amd ryzen 5 5560u firmware • amd ryzen 5 5600u firmware • amd ryzen 5 5600h firmware • amd ryzen 5 5600hs firmware … and 7 more

Related

Weakness · CWE (1)

  • CWE-401 Missing Release of Memory after Effective Lifetime weakness

References