CVE-2021-26391

EPSS 0.03%
Published 09.11.2022 21:15:12
Last modified 01.05.2025 15:15:54
Source psirt@amd.com
Teams watchlist Login
Open Login

Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the OS/kernel.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Amd ≫ Enterprise Driver Version < 22.10.20

   Amd ≫ Radeon Pro W5500 Version-
   Amd ≫ Radeon Pro W5500x Version-
   Amd ≫ Radeon Pro W5700 Version-
   Amd ≫ Radeon Pro W5700x Version-
   Amd ≫ Radeon Pro W6300m Version-
   Amd ≫ Radeon Pro W6400 Version-
   Amd ≫ Radeon Pro W6500m Version-
   Amd ≫ Radeon Pro W6600 Version-
   Amd ≫ Radeon Pro W6600m Version-
   Amd ≫ Radeon Pro W6600x Version-
   Amd ≫ Radeon Pro W6800 Version-
   Amd ≫ Radeon Pro W6800x Version-
   Amd ≫ Radeon Pro W6800x Duo Version-
   Amd ≫ Radeon Pro W6900x Version-
   Amd ≫ Radeon Rx 5300 Version-
   Amd ≫ Radeon Rx 5300 Xt Version-
   Amd ≫ Radeon Rx 5300m Version-
   Amd ≫ Radeon Rx 5500 Version-
   Amd ≫ Radeon Rx 5500 Xt Version-
   Amd ≫ Radeon Rx 5500m Version-
   Amd ≫ Radeon Rx 5600 Version-
   Amd ≫ Radeon Rx 5600 Xt Version-
   Amd ≫ Radeon Rx 5600m Version-
   Amd ≫ Radeon Rx 5700 Version-
   Amd ≫ Radeon Rx 5700 Xt Version-
   Amd ≫ Radeon Rx 5700m Version-
   Amd ≫ Radeon Rx 6300m Version-
   Amd ≫ Radeon Rx 6400 Version-
   Amd ≫ Radeon Rx 6500 Xt Version-
   Amd ≫ Radeon Rx 6500m Version-
   Amd ≫ Radeon Rx 6600 Version-
   Amd ≫ Radeon Rx 6600 Xt Version-
   Amd ≫ Radeon Rx 6600m Version-
   Amd ≫ Radeon Rx 6600s Version-
   Amd ≫ Radeon Rx 6650 Xt Version-
   Amd ≫ Radeon Rx 6650m Version-
   Amd ≫ Radeon Rx 6650m Xt Version-
   Amd ≫ Radeon Rx 6700 Version-
   Amd ≫ Radeon Rx 6700 Xt Version-
   Amd ≫ Radeon Rx 6700m Version-
   Amd ≫ Radeon Rx 6700s Version-
   Amd ≫ Radeon Rx 6750 Xt Version-
   Amd ≫ Radeon Rx 6800 Version-
   Amd ≫ Radeon Rx 6800 Xt Version-
   Amd ≫ Radeon Rx 6800m Version-
   Amd ≫ Radeon Rx 6800s Version-
   Amd ≫ Radeon Rx 6850m Xt Version-
   Amd ≫ Radeon Rx 6900 Xt Version-
   Amd ≫ Radeon Rx 6950 Xt Version-

Amd ≫ Radeon Pro Software SwEditionenterprise Version < 22.q2

Amd ≫ Radeon Software Version < 22.5.2

Amd ≫ Radeon Rx Vega 56 Firmware Version-

Amd ≫ Radeon Rx Vega 56 Version-

Amd ≫ Radeon Rx Vega 64 Firmware Version-

Amd ≫ Radeon Rx Vega 64 Version-

Amd ≫ Ryzen 3 5300ge Firmware Version-

Amd ≫ Ryzen 3 5300ge Version-

Amd ≫ Ryzen 3 5300g Firmware Version-

Amd ≫ Ryzen 3 5300g Version-

Amd ≫ Ryzen 5 5600ge Firmware Version-

Amd ≫ Ryzen 5 5600ge Version-

Amd ≫ Ryzen 5 5600g Firmware Version-

Amd ≫ Ryzen 5 5600g Version-

Amd ≫ Ryzen 7 5700ge Firmware Version-

Amd ≫ Ryzen 7 5700ge Version-

Amd ≫ Ryzen 7 5700g Firmware Version-

Amd ≫ Ryzen 7 5700g Version-

Amd ≫ Ryzen 3 5300u Firmware Version-

Amd ≫ Ryzen 3 5300u Version-

Amd ≫ Ryzen 5 5500u Firmware Version-

Amd ≫ Ryzen 5 5500u Version-

Amd ≫ Ryzen 7 5700u Firmware Version-

Amd ≫ Ryzen 7 5700u Version-

Amd ≫ Ryzen 3 5400u Firmware Version-

Amd ≫ Ryzen 3 5400u Version-

Amd ≫ Ryzen 5 5560u Firmware Version-

Amd ≫ Ryzen 5 5560u Version-

Amd ≫ Ryzen 5 5600u Firmware Version-

Amd ≫ Ryzen 5 5600u Version-

Amd ≫ Ryzen 5 5600h Firmware Version-

Amd ≫ Ryzen 5 5600h Version-

Amd ≫ Ryzen 5 5600hs Firmware Version-

Amd ≫ Ryzen 5 5600hs Version-

Amd ≫ Ryzen 7 5800u Firmware Version-

Amd ≫ Ryzen 7 5800u Version-

Amd ≫ Ryzen 7 5800h Firmware Version-

Amd ≫ Ryzen 7 5800h Version-

Amd ≫ Ryzen 7 5800hs Firmware Version-

Amd ≫ Ryzen 7 5800hs Version-

Amd ≫ Ryzen 9 5900hs Firmware Version-

Amd ≫ Ryzen 9 5900hs Version-

Amd ≫ Ryzen 9 5900hx Firmware Version-

Amd ≫ Ryzen 9 5900hx Version-

Amd ≫ Ryzen 9 5980hs Firmware Version-

Amd ≫ Ryzen 9 5980hs Version-

Amd ≫ Ryzen 9 5980hx Firmware Version-

Amd ≫ Ryzen 9 5980hx Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.03%	0.079

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-347 Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-26391

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-26391

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-26391

EUVD