Skip to content
CVE PROGRAM SOURCE RECORD7.9 High

CVE-2021-26383

Insufficient bounds checking in AMD TEE (Trusted Execution Environment) could allow an attacker with a compromised userspace to invoke a command with malformed arguments leading to

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Insufficient bounds checking in AMD TEE (Trusted Execution Environment) could allow an attacker with a compromised userspace to invoke a command with malformed arguments leading to out of bounds memory access, potentially resulting in loss of integrity or availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • CezannePI-FP6 1.0.0.6unaffected

AMD AMD Ryzen™ 4000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2 PI 1.2.0.5unaffected

AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • CezannePI-FP6 1.0.0.6unaffected

AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics

Default version status: affected

  • ComboAM4v2 PI 1.2.0.5unaffected

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • RenoirPI-FP6 1.0.0.7unaffected

AMD AMD Ryzen™ Embedded V2000 Series Processors

Default version status: affected

  • EmbeddedPI-FP6_1.0.0.6unaffected

AMD AMD Radeon™ RX 5000 Series Graphics Products

Default version status: affected

  • AMD Software: Adrenalin Edition 23.2.1 (22.40.01.45)unaffected

AMD AMD Radeon™ RX 6000 Series Graphics Products

Default version status: affected

  • AMD Software: Adrenalin Edition 23.2.1 (22.40.01.45)unaffected

AMD AMD Radeon™ PRO W5000 Series Graphics Products

Default version status: affected

  • AMD Software: PRO Edition 23.Q1 (22.40.37.05)unaffected

AMD AMD Radeon™ PRO W6000 Series Graphics Products

Default version status: affected

  • AMD Software: PRO Edition 23.Q1 (22.40.37.05)unaffected

AMD AMD Instinct™ MI210

Default version status: affected

  • ROCm 6.4unaffected

AMD AMD Instinct™ MI250

Default version status: affected

  • ROCm 6.4unaffected

AMD AMD Radeon™ PRO V520 Graphics Products

Default version status: affected

  • Contact your AMD Customer Engineering representativeunaffected

AMD AMD Radeon™ PRO V620 Graphics Products

Default version status: affected

  • Contact your AMD Customer Engineering representativeunaffected

References