CVE Feed

    Dashboard / CVE / CVE-2021-26367

    CVE-2021-26367

    A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability.

    Published:Aug 13, 2024
    Last Modified:Dec 12, 2024
    EPS:Aug 13, 2024
    EPSS Score:0.00022
    CVSS Score:5.7

    Affected Products

    Vendor
    Amd
    Product
    Athlon Gold 3150c
    Vendor
    Amd
    Product
    Athlon Gold 3150c Firmware
    Vendor
    Amd
    Product
    Athlon Gold 3150g
    Vendor
    Amd
    Product
    Athlon Gold 3150g Firmware
    Vendor
    Amd
    Product
    Athlon Gold 3150u
    Vendor
    Amd
    Product
    Athlon Gold 3150u Firmware
    Vendor
    Amd
    Product
    Athlon Gold Pro 3150g
    Vendor
    Amd
    Product
    Athlon Gold Pro 3150g Firmware
    Vendor
    Amd
    Product
    Athlon Gold Pro 3150ge
    Vendor
    Amd
    Product
    Athlon Gold Pro 3150ge Firmware
    Vendor
    Amd
    Product
    Athlon Pro 300ge
    Vendor
    Amd
    Product
    Athlon Pro 300ge Firmware
    Vendor
    Amd
    Product
    Athlon Pro 3045b
    Vendor
    Amd
    Product
    Athlon Pro 3045b Firmware
    Vendor
    Amd
    Product
    Athlon Pro 3145b
    Vendor
    Amd
    Product
    Athlon Pro 3145b Firmware
    Vendor
    Amd
    Product
    Athlon Silver 3050c
    Vendor
    Amd
    Product
    Athlon Silver 3050c Firmware
    Vendor
    Amd
    Product
    Athlon Silver 3050e
    Vendor
    Amd
    Product
    Athlon Silver 3050e Firmware
    Vendor
    Amd
    Product
    Athlon Silver 3050u
    Vendor
    Amd
    Product
    Athlon Silver 3050u Firmware
    Vendor
    Amd
    Product
    Radeon Pro W6300
    Vendor
    Amd
    Product
    Radeon Pro W6400
    Vendor
    Amd
    Product
    Radeon Pro W6600
    Vendor
    Amd
    Product
    Radeon Pro W6800
    Vendor
    Amd
    Product
    Radeon Rx 6300m
    Vendor
    Amd
    Product
    Radeon Rx 6400
    Vendor
    Amd
    Product
    Radeon Rx 6450m
    Vendor
    Amd
    Product
    Radeon Rx 6500 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6500m
    Vendor
    Amd
    Product
    Radeon Rx 6550m
    Vendor
    Amd
    Product
    Radeon Rx 6550s
    Vendor
    Amd
    Product
    Radeon Rx 6600
    Vendor
    Amd
    Product
    Radeon Rx 6600 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6600m
    Vendor
    Amd
    Product
    Radeon Rx 6600s
    Vendor
    Amd
    Product
    Radeon Rx 6650 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6650m
    Vendor
    Amd
    Product
    Radeon Rx 6650m Xt
    Vendor
    Amd
    Product
    Radeon Rx 6700
    Vendor
    Amd
    Product
    Radeon Rx 6700 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6700m
    Vendor
    Amd
    Product
    Radeon Rx 6700s
    Vendor
    Amd
    Product
    Radeon Rx 6750 Gre
    Vendor
    Amd
    Product
    Radeon Rx 6750 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6800
    Vendor
    Amd
    Product
    Radeon Rx 6800 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6800m
    Vendor
    Amd
    Product
    Radeon Rx 6800s
    Vendor
    Amd
    Product
    Radeon Rx 6850m Xt
    Vendor
    Amd
    Product
    Radeon Rx 6900 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6950 Xt
    Vendor
    Amd
    Product
    Radeon Software
    Vendor
    Amd
    Product
    Ryzen 3 3300u
    Vendor
    Amd
    Product
    Ryzen 3 3300u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 3350u
    Vendor
    Amd
    Product
    Ryzen 3 3350u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 4300g
    Vendor
    Amd
    Product
    Ryzen 3 4300g Firmware
    Vendor
    Amd
    Product
    Ryzen 3 4300ge
    Vendor
    Amd
    Product
    Ryzen 3 4300ge Firmware
    Vendor
    Amd
    Product
    Ryzen 3 5300g
    Vendor
    Amd
    Product
    Ryzen 3 5300g Firmware
    Vendor
    Amd
    Product
    Ryzen 3 5300ge
    Vendor
    Amd
    Product
    Ryzen 3 5300ge Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3450u
    Vendor
    Amd
    Product
    Ryzen 5 3450u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3500c
    Vendor
    Amd
    Product
    Ryzen 5 3500c Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3500u
    Vendor
    Amd
    Product
    Ryzen 5 3500u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3550h
    Vendor
    Amd
    Product
    Ryzen 5 3550h Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3580u
    Vendor
    Amd
    Product
    Ryzen 5 3580u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 4600g
    Vendor
    Amd
    Product
    Ryzen 5 4600g Firmware
    Vendor
    Amd
    Product
    Ryzen 5 4600ge
    Vendor
    Amd
    Product
    Ryzen 5 4600ge Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5600g
    Vendor
    Amd
    Product
    Ryzen 5 5600g Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5600ge
    Vendor
    Amd
    Product
    Ryzen 5 5600ge Firmware
    Vendor
    Amd
    Product
    Ryzen 7 3700c
    Vendor
    Amd
    Product
    Ryzen 7 3700c Firmware
    Vendor
    Amd
    Product
    Ryzen 7 3700u
    Vendor
    Amd
    Product
    Ryzen 7 3700u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 3750h
    Vendor
    Amd
    Product
    Ryzen 7 3750h Firmware
    Vendor
    Amd
    Product
    Ryzen 7 3780u
    Vendor
    Amd
    Product
    Ryzen 7 3780u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 4700g
    Vendor
    Amd
    Product
    Ryzen 7 4700g Firmware
    Vendor
    Amd
    Product
    Ryzen 7 4700ge
    Vendor
    Amd
    Product
    Ryzen 7 4700ge Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5700g
    Vendor
    Amd
    Product
    Ryzen 7 5700g Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5700ge
    Vendor
    Amd
    Product
    Ryzen 7 5700ge Firmware
    Vendor
    Amd
    Product
    Ryzen 9 5980hx
    Vendor
    Amd
    Product
    Ryzen 9 5980hx Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-20589 (CVSS 6.8) — An attacker with specialized hardware and physical access to an impacted device may be able to perform a volt…
    CVE-2023-20555 (CVSS 7.8) — Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriti…
    CVE-2022-27672 (CVSS 4.7) — When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sib…
    CVE-2021-26316 (CVSS 7.8) — Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to ta…
    CVE-2020-12930 (CVSS 7.8) — Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate …
    CVE-2021-26392 (CVSS 7.8) — Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially…
    CVE-2021-26393 (CVSS 5.5) — Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an…
    CVE-2020-12931 (CVSS 7.8) — Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to eleva…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High