CVE-2021-26363

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 12-05-2022 09:15

Last modified: - 01-06-2022 04:57

Total changes: - 2

Description

A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenced area, potentially leading to data exposure.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Low

Attack complexity

Local

Attack vector

None

Availability

Low

Confidentiality

Low

Integrity

Low

Privileges required

Unchanged

Scope

None

User interaction

4.4

Base score

1.8

2.5

Exploitability score

Impact score

Verification logic

vendor=amd AND product=radeon_software AND version=-

AND

vendor=amd AND product=ryzen_3_3100_firmware AND version=-

vendor=amd AND product=ryzen_3_3100 AND version=-

AND

vendor=amd AND product=ryzen_3_3300g_firmware AND version=-

vendor=amd AND product=ryzen_3_3300g AND version=-

AND

vendor=amd AND product=ryzen_3_3300x_firmware AND version=-

vendor=amd AND product=ryzen_3_3300x AND version=-

AND

vendor=amd AND product=ryzen_3_5400u_firmware AND version=-

vendor=amd AND product=ryzen_3_5400u AND version=-

AND

vendor=amd AND product=ryzen_9_5900hs_firmware AND version=-

vendor=amd AND product=ryzen_9_5900hs AND version=-

AND

vendor=amd AND product=ryzen_9_5900hx_firmware AND version=-

vendor=amd AND product=ryzen_9_5900hx AND version=-

AND

vendor=amd AND product=ryzen_9_5980hs_firmware AND version=-

vendor=amd AND product=ryzen_9_5980hs AND version=-

AND

vendor=amd AND product=ryzen_9_5980hx_firmware AND version=-

vendor=amd AND product=ryzen_9_5980hx AND version=-

AND

vendor=amd AND product=ryzen_3_5125c_firmware AND version=-

vendor=amd AND product=ryzen_3_5125c AND version=-

AND

vendor=amd AND product=ryzen_3_5425c_firmware AND version=-

vendor=amd AND product=ryzen_3_5425c AND version=-

AND

vendor=amd AND product=ryzen_7_3700x_firmware AND version=-

vendor=amd AND product=ryzen_7_3700x AND version=-

AND

vendor=amd AND product=ryzen_9_3900x_firmware AND version=-

vendor=amd AND product=ryzen_9_3900x AND version=-

AND

vendor=amd AND product=ryzen_9_3950x_firmware AND version=-

vendor=amd AND product=ryzen_9_3950x AND version=-

AND

vendor=amd AND product=ryzen_7_3800x_firmware AND version=-

vendor=amd AND product=ryzen_7_3800x AND version=-

AND

vendor=amd AND product=ryzen_3_5425u_firmware AND version=-

vendor=amd AND product=ryzen_3_5425u AND version=-

AND

vendor=amd AND product=ryzen_5_3400g_firmware AND version=-

vendor=amd AND product=ryzen_5_3400g AND version=-

AND

vendor=amd AND product=ryzen_7_5800h_firmware AND version=-

vendor=amd AND product=ryzen_7_5800h AND version=-

AND

vendor=amd AND product=ryzen_7_5800hs_firmware AND version=-

vendor=amd AND product=ryzen_7_5800hs AND version=-

AND

vendor=amd AND product=ryzen_7_5800u_firmware AND version=-

vendor=amd AND product=ryzen_7_5800u AND version=-

AND

vendor=amd AND product=ryzen_7_5825c_firmware AND version=-

vendor=amd AND product=ryzen_7_5825c AND version=-

AND

vendor=amd AND product=ryzen_7_5825u_firmware AND version=-

vendor=amd AND product=ryzen_7_5825u AND version=-

AND

vendor=amd AND product=ryzen_5_3450g_firmware AND version=-

vendor=amd AND product=ryzen_5_3450g AND version=-

AND

vendor=amd AND product=ryzen_5_3600_firmware AND version=-

vendor=amd AND product=ryzen_5_3600 AND version=-

AND

vendor=amd AND product=ryzen_5_3600x_firmware AND version=-

vendor=amd AND product=ryzen_5_3600x AND version=-

AND

vendor=amd AND product=ryzen_5_5560u_firmware AND version=-

vendor=amd AND product=ryzen_5_5560u AND version=-

AND

vendor=amd AND product=ryzen_5_5600h_firmware AND version=-

vendor=amd AND product=ryzen_5_5600h AND version=-

AND

vendor=amd AND product=ryzen_5_5600u_firmware AND version=-

vendor=amd AND product=ryzen_5_5600u AND version=-

AND

vendor=amd AND product=ryzen_5_5600hs_firmware AND version=-

vendor=amd AND product=ryzen_5_5600hs AND version=-

AND

vendor=amd AND product=ryzen_5_5600x_firmware AND version=-

vendor=amd AND product=ryzen_5_5600x AND version=-

AND

vendor=amd AND product=ryzen_5_5625c_firmware AND version=-

vendor=amd AND product=ryzen_5_5625c AND version=-

AND

vendor=amd AND product=ryzen_5_5625u_firmware AND version=-

vendor=amd AND product=ryzen_5_5625u AND version=-

AND

vendor=amd AND product=ryzen_5_5700g_firmware AND version=-

vendor=amd AND product=ryzen_5_5700g AND version=-

AND

vendor=amd AND product=ryzen_5_5700ge_firmware AND version=-

vendor=amd AND product=ryzen_5_5700ge AND version=-

Reference

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

Keywords

CVE-2021-26363

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-26363

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures