CVE-2021-26393

Description

Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029 ↗
• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-5001 ↗