{"id":"CVE-2021-26314","state":"PUBLISHED","title":"AMD Speculative execution with Floating-Point Value Injection","description":"Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause the use of incorrect data from FPVI and may result in data leakage.","publishedAt":"2021-06-09T11:23:44.010Z","updatedAt":"2024-09-17T02:21:23.613Z","severity":null,"assigner":"AMD","products":["AMD All supported processors"],"affected":[{"vendor":"AMD","product":"All supported processors","versions":[{"version":"unspecified","status":"affected","lessThan":"undefined","versionType":"custom"}]}],"references":["https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1003","http://www.openwall.com/lists/oss-security/2021/06/09/2","http://www.openwall.com/lists/oss-security/2021/06/10/1","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/"],"weaknesses":["CWE-208"],"ingestedAt":"2026-10-29T19:48:13.210Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/26xxx/CVE-2021-26314.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-26314","state":"PUBLISHED","datePublished":"2021-06-09T11:23:44.010Z","dateUpdated":"2024-09-17T02:21:23.613Z","assignerShortName":"AMD","assignerOrgId":"b58fc414-a1e4-4f92-9d70-1add41838648","dateReserved":"2021-01-29T00:00:00.000Z"},"containers":{"cna":{"title":"AMD Speculative execution with Floating-Point Value Injection","descriptions":[{"lang":"en","value":"Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause the use of incorrect data from FPVI and may result in data leakage."}],"affected":[{"vendor":"AMD","product":"All supported processors","versions":[{"version":"unspecified","status":"affected","lessThan":"undefined","versionType":"custom"}]}],"references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1003","tags":["x_refsource_MISC"]},{"url":"http://www.openwall.com/lists/oss-security/2021/06/09/2","name":"[oss-security] 20210609 Xen Security Advisory 375 v3 (CVE-2021-0089,CVE-2021-26313) - Speculative Code Store Bypass","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://www.openwall.com/lists/oss-security/2021/06/10/1","name":"[oss-security] 20210610 Xen Security Advisory 375 v4 (CVE-2021-0089,CVE-2021-26313) - Speculative Code Store Bypass","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/","name":"FEDORA-2021-41d4347447","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/","name":"FEDORA-2021-993693c914","tags":["vendor-advisory","x_refsource_FEDORA"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-208","description":"CWE-208 Information Exposure Through Timing Discrepancy","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"AMD","dateUpdated":"2021-06-17T02:06:09.000Z","orgId":"b58fc414-a1e4-4f92-9d70-1add41838648"},"datePublic":"2021-06-08T00:00:00.000Z","source":{"advisory":"AMD-SB-1003","discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.0.9"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@amd.com","DATE_PUBLIC":"2021-06-08T19:30:00.000Z","ID":"CVE-2021-26314","STATE":"PUBLIC","TITLE":"AMD Speculative execution with Floating-Point Value Injection"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"All supported processors","version":{"version_data":[{"version_affected":"<","version_value":""}]}}]},"vendor_name":"AMD"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause the use of incorrect data from FPVI and may result in data leakage."}]},"generator":{"engine":"Vulnogram 0.0.9"},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-208 Information Exposure Through Timing Discrepancy"}]}]},"references":{"reference_data":[{"name":"https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1003","refsource":"MISC","url":"https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1003"},{"name":"[oss-security] 20210609 Xen Security Advisory 375 v3 (CVE-2021-0089,CVE-2021-26313) - Speculative Code Store Bypass","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2021/06/09/2"},{"name":"[oss-security] 20210610 Xen Security Advisory 375 v4 (CVE-2021-0089,CVE-2021-26313) - Speculative Code Store Bypass","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2021/06/10/1"},{"name":"FEDORA-2021-41d4347447","refsource":"FEDORA","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/"},{"name":"FEDORA-2021-993693c914","refsource":"FEDORA","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/"}]},"source":{"advisory":"AMD-SB-1003","discovery":"EXTERNAL"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1003","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2021/06/09/2","name":"[oss-security] 20210609 Xen Security Advisory 375 v3 (CVE-2021-0089,CVE-2021-26313) - Speculative Code Store Bypass","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2021/06/10/1","name":"[oss-security] 20210610 Xen Security Advisory 375 v4 (CVE-2021-0089,CVE-2021-26313) - Speculative Code Store Bypass","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/","name":"FEDORA-2021-41d4347447","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/","name":"FEDORA-2021-993693c914","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T20:19:20.454Z"}}]}}}