CVE Feed

    Dashboard / CVE / CVE-2021-26393

    CVE-2021-26393

    Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.

    Published:Nov 8, 2022
    Last Modified:Nov 21, 2024
    EPS:Nov 9, 2022
    EPSS Score:0.00127
    CVSS Score:5.5

    Affected Products

    Vendor
    Amd
    Product
    Amd 3015ce
    Vendor
    Amd
    Product
    Amd 3015ce Firmware
    Vendor
    Amd
    Product
    Amd 3015e
    Vendor
    Amd
    Product
    Amd 3015e Firmware
    Vendor
    Amd
    Product
    Amd 3020e
    Vendor
    Amd
    Product
    Amd 3020e Firmware
    Vendor
    Amd
    Product
    Athlon Gold 3150c
    Vendor
    Amd
    Product
    Athlon Gold 3150c Firmware
    Vendor
    Amd
    Product
    Athlon Gold 3150u
    Vendor
    Amd
    Product
    Athlon Gold 3150u Firmware
    Vendor
    Amd
    Product
    Athlon Pro 3045b
    Vendor
    Amd
    Product
    Athlon Pro 3045b Firmware
    Vendor
    Amd
    Product
    Athlon Pro 3145b
    Vendor
    Amd
    Product
    Athlon Pro 3145b Firmware
    Vendor
    Amd
    Product
    Athlon Silver 3050c
    Vendor
    Amd
    Product
    Athlon Silver 3050c Firmware
    Vendor
    Amd
    Product
    Athlon Silver 3050e
    Vendor
    Amd
    Product
    Athlon Silver 3050e Firmware
    Vendor
    Amd
    Product
    Athlon Silver 3050u
    Vendor
    Amd
    Product
    Athlon Silver 3050u Firmware
    Vendor
    Amd
    Product
    Enterprise Driver
    Vendor
    Amd
    Product
    Radeon Pro Software
    Vendor
    Amd
    Product
    Radeon Pro W5500
    Vendor
    Amd
    Product
    Radeon Pro W5500x
    Vendor
    Amd
    Product
    Radeon Pro W5700
    Vendor
    Amd
    Product
    Radeon Pro W5700x
    Vendor
    Amd
    Product
    Radeon Pro W6300m
    Vendor
    Amd
    Product
    Radeon Pro W6400
    Vendor
    Amd
    Product
    Radeon Pro W6500m
    Vendor
    Amd
    Product
    Radeon Pro W6600
    Vendor
    Amd
    Product
    Radeon Pro W6600m
    Vendor
    Amd
    Product
    Radeon Pro W6600x
    Vendor
    Amd
    Product
    Radeon Pro W6800
    Vendor
    Amd
    Product
    Radeon Pro W6800x
    Vendor
    Amd
    Product
    Radeon Pro W6800x Duo
    Vendor
    Amd
    Product
    Radeon Pro W6900x
    Vendor
    Amd
    Product
    Radeon Rx 5300
    Vendor
    Amd
    Product
    Radeon Rx 5300 Xt
    Vendor
    Amd
    Product
    Radeon Rx 5300m
    Vendor
    Amd
    Product
    Radeon Rx 5500
    Vendor
    Amd
    Product
    Radeon Rx 5500 Xt
    Vendor
    Amd
    Product
    Radeon Rx 5500m
    Vendor
    Amd
    Product
    Radeon Rx 5600
    Vendor
    Amd
    Product
    Radeon Rx 5600 Xt
    Vendor
    Amd
    Product
    Radeon Rx 5600m
    Vendor
    Amd
    Product
    Radeon Rx 5700
    Vendor
    Amd
    Product
    Radeon Rx 5700 Xt
    Vendor
    Amd
    Product
    Radeon Rx 5700m
    Vendor
    Amd
    Product
    Radeon Rx 6300m
    Vendor
    Amd
    Product
    Radeon Rx 6400
    Vendor
    Amd
    Product
    Radeon Rx 6500 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6500m
    Vendor
    Amd
    Product
    Radeon Rx 6600
    Vendor
    Amd
    Product
    Radeon Rx 6600 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6600m
    Vendor
    Amd
    Product
    Radeon Rx 6600s
    Vendor
    Amd
    Product
    Radeon Rx 6650 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6650m
    Vendor
    Amd
    Product
    Radeon Rx 6650m Xt
    Vendor
    Amd
    Product
    Radeon Rx 6700
    Vendor
    Amd
    Product
    Radeon Rx 6700 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6700m
    Vendor
    Amd
    Product
    Radeon Rx 6700s
    Vendor
    Amd
    Product
    Radeon Rx 6750 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6800
    Vendor
    Amd
    Product
    Radeon Rx 6800 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6800m
    Vendor
    Amd
    Product
    Radeon Rx 6800s
    Vendor
    Amd
    Product
    Radeon Rx 6850m Xt
    Vendor
    Amd
    Product
    Radeon Rx 6900 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6950 Xt
    Vendor
    Amd
    Product
    Radeon Rx Vega 56
    Vendor
    Amd
    Product
    Radeon Rx Vega 56 Firmware
    Vendor
    Amd
    Product
    Radeon Rx Vega 64
    Vendor
    Amd
    Product
    Radeon Rx Vega 64 Firmware
    Vendor
    Amd
    Product
    Radeon Software
    Vendor
    Amd
    Product
    Ryzen 3 2200g
    Vendor
    Amd
    Product
    Ryzen 3 2200g Firmware
    Vendor
    Amd
    Product
    Ryzen 3 2200ge
    Vendor
    Amd
    Product
    Ryzen 3 2200ge Firmware
    Vendor
    Amd
    Product
    Ryzen 3 2200u
    Vendor
    Amd
    Product
    Ryzen 3 2200u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 2300u
    Vendor
    Amd
    Product
    Ryzen 3 2300u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 3200g
    Vendor
    Amd
    Product
    Ryzen 3 3200g Firmware
    Vendor
    Amd
    Product
    Ryzen 3 3250c
    Vendor
    Amd
    Product
    Ryzen 3 3250c Firmware
    Vendor
    Amd
    Product
    Ryzen 3 3250u
    Vendor
    Amd
    Product
    Ryzen 3 3250u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 3300u
    Vendor
    Amd
    Product
    Ryzen 3 3300u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 3350u
    Vendor
    Amd
    Product
    Ryzen 3 3350u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 5300g
    Vendor
    Amd
    Product
    Ryzen 3 5300g Firmware
    Vendor
    Amd
    Product
    Ryzen 3 5300ge
    Vendor
    Amd
    Product
    Ryzen 3 5300ge Firmware
    Vendor
    Amd
    Product
    Ryzen 3 5300u
    Vendor
    Amd
    Product
    Ryzen 3 5300u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 5400u
    Vendor
    Amd
    Product
    Ryzen 3 5400u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 Pro 3200g
    Vendor
    Amd
    Product
    Ryzen 3 Pro 3200g Firmware
    Vendor
    Amd
    Product
    Ryzen 3 Pro 3200ge
    Vendor
    Amd
    Product
    Ryzen 3 Pro 3200ge Firmware
    Vendor
    Amd
    Product
    Ryzen 5 2400g
    Vendor
    Amd
    Product
    Ryzen 5 2400g Firmware
    Vendor
    Amd
    Product
    Ryzen 5 2400ge
    Vendor
    Amd
    Product
    Ryzen 5 2400ge Firmware
    Vendor
    Amd
    Product
    Ryzen 5 2500u
    Vendor
    Amd
    Product
    Ryzen 5 2500u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 2600h
    Vendor
    Amd
    Product
    Ryzen 5 2600h Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3400g
    Vendor
    Amd
    Product
    Ryzen 5 3400g Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3450u
    Vendor
    Amd
    Product
    Ryzen 5 3450u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3500c
    Vendor
    Amd
    Product
    Ryzen 5 3500c Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3500u
    Vendor
    Amd
    Product
    Ryzen 5 3500u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3550h
    Vendor
    Amd
    Product
    Ryzen 5 3550h Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3580u
    Vendor
    Amd
    Product
    Ryzen 5 3580u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5500u
    Vendor
    Amd
    Product
    Ryzen 5 5500u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5560u
    Vendor
    Amd
    Product
    Ryzen 5 5560u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5600g
    Vendor
    Amd
    Product
    Ryzen 5 5600g Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5600ge
    Vendor
    Amd
    Product
    Ryzen 5 5600ge Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5600h
    Vendor
    Amd
    Product
    Ryzen 5 5600h Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5600hs
    Vendor
    Amd
    Product
    Ryzen 5 5600hs Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5600u
    Vendor
    Amd
    Product
    Ryzen 5 5600u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 Pro 3350g
    Vendor
    Amd
    Product
    Ryzen 5 Pro 3350g Firmware
    Vendor
    Amd
    Product
    Ryzen 5 Pro 3350ge
    Vendor
    Amd
    Product
    Ryzen 5 Pro 3350ge Firmware
    Vendor
    Amd
    Product
    Ryzen 5 Pro 3400g
    Vendor
    Amd
    Product
    Ryzen 5 Pro 3400g Firmware
    Vendor
    Amd
    Product
    Ryzen 5 Pro 3400ge
    Vendor
    Amd
    Product
    Ryzen 5 Pro 3400ge Firmware
    Vendor
    Amd
    Product
    Ryzen 7 2700u
    Vendor
    Amd
    Product
    Ryzen 7 2700u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 2800h
    Vendor
    Amd
    Product
    Ryzen 7 2800h Firmware
    Vendor
    Amd
    Product
    Ryzen 7 3700c
    Vendor
    Amd
    Product
    Ryzen 7 3700c Firmware
    Vendor
    Amd
    Product
    Ryzen 7 3700u
    Vendor
    Amd
    Product
    Ryzen 7 3700u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 3750h
    Vendor
    Amd
    Product
    Ryzen 7 3750h Firmware
    Vendor
    Amd
    Product
    Ryzen 7 3780u
    Vendor
    Amd
    Product
    Ryzen 7 3780u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5700g
    Vendor
    Amd
    Product
    Ryzen 7 5700g Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5700ge
    Vendor
    Amd
    Product
    Ryzen 7 5700ge Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5700u
    Vendor
    Amd
    Product
    Ryzen 7 5700u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5800h
    Vendor
    Amd
    Product
    Ryzen 7 5800h Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5800hs
    Vendor
    Amd
    Product
    Ryzen 7 5800hs Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5800u
    Vendor
    Amd
    Product
    Ryzen 7 5800u Firmware
    Vendor
    Amd
    Product
    Ryzen 9 5900hs
    Vendor
    Amd
    Product
    Ryzen 9 5900hs Firmware
    Vendor
    Amd
    Product
    Ryzen 9 5900hx
    Vendor
    Amd
    Product
    Ryzen 9 5900hx Firmware
    Vendor
    Amd
    Product
    Ryzen 9 5980hs
    Vendor
    Amd
    Product
    Ryzen 9 5980hs Firmware
    Vendor
    Amd
    Product
    Ryzen 9 5980hx
    Vendor
    Amd
    Product
    Ryzen 9 5980hx Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-20521 (CVSS 3.3) — TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after m…
    CVE-2021-26371 (CVSS 5.5) — A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in …
    CVE-2021-26365 (CVSS 8.2) — Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, …
    CVE-2021-26354 (CVSS 5.5) — Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which …
    CVE-2020-12930 (CVSS 7.8) — Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate …
    CVE-2021-26392 (CVSS 7.8) — Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially…
    CVE-2020-12931 (CVSS 7.8) — Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to eleva…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High