CVE-2021-26393

2022-11-0920:44:25

AMD

www.cve.org

amd

secure processor

trusted execution environment

insufficient memory cleanup

confidentiality loss

AI Score

Confidence

High

EPSS

Percentile

12.6%

JSON

Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "AMD Radeon RX 5000 Series & PRO W5000 Series",
    "vendor": "AMD",
    "versions": [
      {
        "lessThan": "22.5.2",
        "status": "affected",
        "version": "AMD Radeon Software",
        "versionType": "custom"
      },
      {
        "lessThan": "22.Q2",
        "status": "affected",
        "version": "AMD Radeon Pro Software Enterprise",
        "versionType": "custom"
      },
      {
        "lessThan": "22.10.20",
        "status": "affected",
        "version": "Enterprise Driver",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD Radeon RX 6000 Series & PRO W6000 Series",
    "vendor": "AMD",
    "versions": [
      {
        "lessThan": "22.5.2",
        "status": "affected",
        "version": "AMD Radeon Software",
        "versionType": "custom"
      },
      {
        "lessThan": "22.Q2",
        "status": "affected",
        "version": "AMD Radeon Pro Software Enterprise",
        "versionType": "custom"
      },
      {
        "lessThan": "22.10.20",
        "status": "affected",
        "version": "Enterprise Driver",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD Ryzen™ Embedded R1000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD Ryzen™ Embedded R2000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD Ryzen™ Embedded V1000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD Ryzen™ Embedded V2000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]