CVE-2021-26393
—CVSS 3.1
5.5 medium
EPSS
<1%p17
Published
()
Modified
Description
Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.
- Vendors
- amd
- Products
- enterprise driver, radeon pro software, radeon software, radeon rx vega 56 firmware, radeon rx vega 64 firmware, ryzen 3 2200ge firmware, ryzen 3 2200g firmware, ryzen 5 2400ge firmware, ryzen 5 2400g firmware, ryzen 3 5300ge firmware, ryzen 3 5300g firmware, ryzen 5 5600ge firmware
- Weakness
- CWE-401
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.