ZeroHour

CVE-2021-26391

CVSS 3.1
7.8 high
EPSS
<1%p8
Published
()
Modified
Description

Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the OS/kernel.

Vendors
amd
Products
enterprise driver, radeon pro software, radeon software, radeon rx vega 56 firmware, radeon rx vega 64 firmware, ryzen 3 5300ge firmware, ryzen 3 5300g firmware, ryzen 5 5600ge firmware, ryzen 5 5600g firmware, ryzen 7 5700ge firmware, ryzen 7 5700g firmware, ryzen 3 5300u firmware
Weakness
CWE-347
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.