CVE-2021-26367

· MEDIUMAnalyzed

← All CVEs

CVSS v3.1

5.7

EPSS

0.16%

Published

Aug 13, 2024

Modified

Dec 12, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability.

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H

Affected Products (103)

amd · radeon_software (up to 23.12.1)vulnerable

amd · radeon_rx_6300m

amd · radeon_rx_6400

amd · radeon_rx_6450m

amd · radeon_rx_6500_xt

amd · radeon_rx_6500m

amd · radeon_rx_6550m

amd · radeon_rx_6550s

amd · radeon_rx_6600

amd · radeon_rx_6600_xt

amd · radeon_rx_6600m

amd · radeon_rx_6600s

amd · radeon_rx_6650_xt

amd · radeon_rx_6650m

amd · radeon_rx_6650m_xt

amd · radeon_rx_6700

amd · radeon_rx_6700_xt

amd · radeon_rx_6700m

amd · radeon_rx_6700s

amd · radeon_rx_6750_gre

amd · radeon_rx_6750_xt

amd · radeon_rx_6800

amd · radeon_rx_6800_xt

amd · radeon_rx_6800m

amd · radeon_rx_6800s

amd · radeon_rx_6850m_xt

amd · radeon_rx_6900_xt

amd · radeon_rx_6950_xt

amd · radeon_softwarevulnerable

amd · radeon_pro_w6300

amd · radeon_pro_w6400

amd · radeon_pro_w6600

amd · radeon_pro_w6800

amd · ryzen_9_5980hx_firmware (up to cezannepi-fp6_1.0.0.6)vulnerable

amd · ryzen_9_5980hx

amd · ryzen_3_3300u_firmware (up to picassopi-fp5_1.0.0.e)vulnerable

amd · ryzen_3_3300u

amd · ryzen_3_3350u_firmware (up to picassopi-fp5_1.0.0.e)vulnerable

amd · ryzen_3_3350u

amd · ryzen_5_3450u_firmware (up to picassopi-fp5_1.0.0.e)vulnerable

amd · ryzen_5_3450u

amd · ryzen_5_3500u_firmware (up to picassopi-fp5_1.0.0.e)vulnerable

amd · ryzen_5_3500u

amd · ryzen_5_3500c_firmware (up to picassopi-fp5_1.0.0.e)vulnerable

amd · ryzen_5_3500c

amd · ryzen_5_3550h_firmware (up to picassopi-fp5_1.0.0.e)vulnerable

amd · ryzen_5_3550h

amd · ryzen_5_3580u_firmware (up to picassopi-fp5_1.0.0.e)vulnerable

amd · ryzen_5_3580u

amd · ryzen_7_3700u_firmware (up to picassopi-fp5_1.0.0.e)vulnerable

...and 53 more

References (2)

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html

Vendor Advisory

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6005.html

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs