CVE-2021-26391

EPSS 0.18%
Veröffentlicht 09.11.2022 21:15:12
Zuletzt bearbeitet 01.05.2025 15:15:54
Erkennungen
Login

Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the OS/kernel.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 26 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Amd ≫ Enterprise Driver Version < 22.10.20

   Amd ≫ Radeon Pro W5500 Version -
   Amd ≫ Radeon Pro W5500x Version -
   Amd ≫ Radeon Pro W5700 Version -
   Amd ≫ Radeon Pro W5700x Version -
   Amd ≫ Radeon Pro W6300m Version -
   Amd ≫ Radeon Pro W6400 Version -
   Amd ≫ Radeon Pro W6500m Version -
   Amd ≫ Radeon Pro W6600 Version -
   Amd ≫ Radeon Pro W6600m Version -
   Amd ≫ Radeon Pro W6600x Version -
   Amd ≫ Radeon Pro W6800 Version -
   Amd ≫ Radeon Pro W6800x Version -
   Amd ≫ Radeon Pro W6800x Duo Version -
   Amd ≫ Radeon Pro W6900x Version -
   Amd ≫ Radeon Rx 5300 Version -
   Amd ≫ Radeon Rx 5300 Xt Version -
   Amd ≫ Radeon Rx 5300m Version -
   Amd ≫ Radeon Rx 5500 Version -
   Amd ≫ Radeon Rx 5500 Xt Version -
   Amd ≫ Radeon Rx 5500m Version -
   Amd ≫ Radeon Rx 5600 Version -
   Amd ≫ Radeon Rx 5600 Xt Version -
   Amd ≫ Radeon Rx 5600m Version -
   Amd ≫ Radeon Rx 5700 Version -
   Amd ≫ Radeon Rx 5700 Xt Version -
   Amd ≫ Radeon Rx 5700m Version -
   Amd ≫ Radeon Rx 6300m Version -
   Amd ≫ Radeon Rx 6400 Version -
   Amd ≫ Radeon Rx 6500 Xt Version -
   Amd ≫ Radeon Rx 6500m Version -
   Amd ≫ Radeon Rx 6600 Version -
   Amd ≫ Radeon Rx 6600 Xt Version -
   Amd ≫ Radeon Rx 6600m Version -
   Amd ≫ Radeon Rx 6600s Version -
   Amd ≫ Radeon Rx 6650 Xt Version -
   Amd ≫ Radeon Rx 6650m Version -
   Amd ≫ Radeon Rx 6650m Xt Version -
   Amd ≫ Radeon Rx 6700 Version -
   Amd ≫ Radeon Rx 6700 Xt Version -
   Amd ≫ Radeon Rx 6700m Version -
   Amd ≫ Radeon Rx 6700s Version -
   Amd ≫ Radeon Rx 6750 Xt Version -
   Amd ≫ Radeon Rx 6800 Version -
   Amd ≫ Radeon Rx 6800 Xt Version -
   Amd ≫ Radeon Rx 6800m Version -
   Amd ≫ Radeon Rx 6800s Version -
   Amd ≫ Radeon Rx 6850m Xt Version -
   Amd ≫ Radeon Rx 6900 Xt Version -
   Amd ≫ Radeon Rx 6950 Xt Version -

Amd ≫ Radeon Pro Software SwEdition enterprise Version < 22.q2

Amd ≫ Radeon Software Version < 22.5.2

Amd ≫ Radeon Rx Vega 56 Firmware Version -

Amd ≫ Radeon Rx Vega 56 Version -

Amd ≫ Radeon Rx Vega 64 Firmware Version -

Amd ≫ Radeon Rx Vega 64 Version -

Amd ≫ Ryzen 3 5300ge Firmware Version -

Amd ≫ Ryzen 3 5300ge Version -

Amd ≫ Ryzen 3 5300g Firmware Version -

Amd ≫ Ryzen 3 5300g Version -

Amd ≫ Ryzen 5 5600ge Firmware Version -

Amd ≫ Ryzen 5 5600ge Version -

Amd ≫ Ryzen 5 5600g Firmware Version -

Amd ≫ Ryzen 5 5600g Version -

Amd ≫ Ryzen 7 5700ge Firmware Version -

Amd ≫ Ryzen 7 5700ge Version -

Amd ≫ Ryzen 7 5700g Firmware Version -

Amd ≫ Ryzen 7 5700g Version -

Amd ≫ Ryzen 3 5300u Firmware Version -

Amd ≫ Ryzen 3 5300u Version -

Amd ≫ Ryzen 5 5500u Firmware Version -

Amd ≫ Ryzen 5 5500u Version -

Amd ≫ Ryzen 7 5700u Firmware Version -

Amd ≫ Ryzen 7 5700u Version -

Amd ≫ Ryzen 3 5400u Firmware Version -

Amd ≫ Ryzen 3 5400u Version -

Amd ≫ Ryzen 5 5560u Firmware Version -

Amd ≫ Ryzen 5 5560u Version -

Amd ≫ Ryzen 5 5600u Firmware Version -

Amd ≫ Ryzen 5 5600u Version -

Amd ≫ Ryzen 5 5600h Firmware Version -

Amd ≫ Ryzen 5 5600h Version -

Amd ≫ Ryzen 5 5600hs Firmware Version -

Amd ≫ Ryzen 5 5600hs Version -

Amd ≫ Ryzen 7 5800u Firmware Version -

Amd ≫ Ryzen 7 5800u Version -

Amd ≫ Ryzen 7 5800h Firmware Version -

Amd ≫ Ryzen 7 5800h Version -

Amd ≫ Ryzen 7 5800hs Firmware Version -

Amd ≫ Ryzen 7 5800hs Version -

Amd ≫ Ryzen 9 5900hs Firmware Version -

Amd ≫ Ryzen 9 5900hs Version -

Amd ≫ Ryzen 9 5900hx Firmware Version -

Amd ≫ Ryzen 9 5900hx Version -

Amd ≫ Ryzen 9 5980hs Firmware Version -

Amd ≫ Ryzen 9 5980hs Version -

Amd ≫ Ryzen 9 5980hx Firmware Version -

Amd ≫ Ryzen 9 5980hx Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.18%	0.078

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA-ADP	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-347 Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-26391

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-26391

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-26391

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2021-26391