ZeroHour

CVE-2021-26393

CVSS 3.1
5.5 medium
EPSS
<1%p17
Published
()
Modified
Description

Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.

Vendors
amd
Products
enterprise driver, radeon pro software, radeon software, radeon rx vega 56 firmware, radeon rx vega 64 firmware, ryzen 3 2200ge firmware, ryzen 3 2200g firmware, ryzen 5 2400ge firmware, ryzen 5 2400g firmware, ryzen 3 5300ge firmware, ryzen 3 5300g firmware, ryzen 5 5600ge firmware
Weakness
CWE-401
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.