Lucene search

AMDCVE-2021-26363

HistoryMay 12, 2022 - 7:15 p.m.

CVE-2021-26363

2022-05-1219:15:48

AMD

web.nvd.nist.gov

118

cve

2021

26363

malicious

compromised

uapp

abl

asp

dram

data exposure

nvd

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

AI Score

5.7

Confidence

High

EPSS

Percentile

12.6%

JSON

A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenced area, potentially leading to data exposure.

Affected configurations

Nvd

Node

amdradeon_softwareMatch-

Node

amdryzen_3_3100_firmwareMatch-

AND

amdryzen_3_3100Match-

Node

amdryzen_3_3300g_firmwareMatch-

AND

amdryzen_3_3300gMatch-

Node

amdryzen_3_3300x_firmwareMatch-

AND

amdryzen_3_3300xMatch-

Node

amdryzen_3_5400u_firmwareMatch-

AND

amdryzen_3_5400uMatch-

Node

amdryzen_9_5900hs_firmwareMatch-

AND

amdryzen_9_5900hsMatch-

Node

amdryzen_9_5900hx_firmwareMatch-

AND

amdryzen_9_5900hxMatch-

Node

amdryzen_9_5980hs_firmwareMatch-

AND

amdryzen_9_5980hsMatch-

Node

amdryzen_9_5980hx_firmwareMatch-

AND

amdryzen_9_5980hxMatch-

Node

amdryzen_3_5125c_firmwareMatch-

AND

amdryzen_3_5125cMatch-

Node

amdryzen_3_5425c_firmwareMatch-

AND

amdryzen_3_5425cMatch-

Node

amdryzen_7_3700x_firmwareMatch-

AND

amdryzen_7_3700xMatch-

Node

amdryzen_9_3900x_firmwareMatch-

AND

amdryzen_9_3900xMatch-

Node

amdryzen_9_3950x_firmwareMatch-

AND

amdryzen_9_3950xMatch-

Node

amdryzen_7_3800x_firmwareMatch-

AND

amdryzen_7_3800xMatch-

Node

amdryzen_3_5425u_firmwareMatch-

AND

amdryzen_3_5425uMatch-

Node

amdryzen_5_3400g_firmwareMatch-

AND

amdryzen_5_3400gMatch-

Node

amdryzen_7_5800h_firmwareMatch-

AND

amdryzen_7_5800hMatch-

Node

amdryzen_7_5800hs_firmwareMatch-

AND

amdryzen_7_5800hsMatch-

Node

amdryzen_7_5800u_firmwareMatch-

AND

amdryzen_7_5800uMatch-

Node

amdryzen_7_5825c_firmwareMatch-

AND

amdryzen_7_5825cMatch-

Node

amdryzen_7_5825u_firmwareMatch-

AND

amdryzen_7_5825uMatch-

Node

amdryzen_5_3450g_firmwareMatch-

AND

amdryzen_5_3450gMatch-

Node

amdryzen_5_3600_firmwareMatch-

AND

amdryzen_5_3600Match-

Node

amdryzen_5_3600x_firmwareMatch-

AND

amdryzen_5_3600xMatch-

Node

amdryzen_5_5560u_firmwareMatch-

AND

amdryzen_5_5560uMatch-

Node

amdryzen_5_5600h_firmwareMatch-

AND

amdryzen_5_5600hMatch-

Node

amdryzen_5_5600u_firmwareMatch-

AND

amdryzen_5_5600uMatch-

Node

amdryzen_5_5600hsMatch-

AND

amdryzen_5_5600hs_firmwareMatch-

Node

amdryzen_5_5600xMatch-

AND

amdryzen_5_5600x_firmwareMatch-

Node

amdryzen_5_5625cMatch-

AND

amdryzen_5_5625c_firmwareMatch-

Node

amdryzen_5_5625uMatch-

AND

amdryzen_5_5625u_firmwareMatch-

Node

amdryzen_5_5700gMatch-

AND

amdryzen_5_5700g_firmwareMatch-

Node

amdryzen_5_5700geMatch-

AND

amdryzen_5_5700ge_firmwareMatch-

VendorProductVersionCPE
amdradeon_software-cpe:2.3:a:amd:radeon_software:-:*:*:*:*:*:*:*
amdryzen_3_3100_firmware-cpe:2.3:o:amd:ryzen_3_3100_firmware:-:*:*:*:*:*:*:*
amdryzen_3_3100-cpe:2.3:h:amd:ryzen_3_3100:-:*:*:*:*:*:*:*
amdryzen_3_3300g_firmware-cpe:2.3:o:amd:ryzen_3_3300g_firmware:-:*:*:*:*:*:*:*
amdryzen_3_3300g-cpe:2.3:h:amd:ryzen_3_3300g:-:*:*:*:*:*:*:*
amdryzen_3_3300x_firmware-cpe:2.3:o:amd:ryzen_3_3300x_firmware:-:*:*:*:*:*:*:*
amdryzen_3_3300x-cpe:2.3:h:amd:ryzen_3_3300x:-:*:*:*:*:*:*:*
amdryzen_3_5400u_firmware-cpe:2.3:o:amd:ryzen_3_5400u_firmware:-:*:*:*:*:*:*:*
amdryzen_3_5400u-cpe:2.3:h:amd:ryzen_3_5400u:-:*:*:*:*:*:*:*
amdryzen_9_5900hs_firmware-cpe:2.3:o:amd:ryzen_9_5900hs_firmware:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
amd	radeon_software	-	cpe:2.3:a:amd:radeon_software:-:::::::*
amd	ryzen_3_3100_firmware	-	cpe:2.3:o:amd:ryzen_3_3100_firmware:-:::::::*
amd	ryzen_3_3100	-	cpe:2.3:h:amd:ryzen_3_3100:-:::::::*
amd	ryzen_3_3300g_firmware	-	cpe:2.3:o:amd:ryzen_3_3300g_firmware:-:::::::*
amd	ryzen_3_3300g	-	cpe:2.3:h:amd:ryzen_3_3300g:-:::::::*
amd	ryzen_3_3300x_firmware	-	cpe:2.3:o:amd:ryzen_3_3300x_firmware:-:::::::*
amd	ryzen_3_3300x	-	cpe:2.3:h:amd:ryzen_3_3300x:-:::::::*
amd	ryzen_3_5400u_firmware	-	cpe:2.3:o:amd:ryzen_3_5400u_firmware:-:::::::*
amd	ryzen_3_5400u	-	cpe:2.3:h:amd:ryzen_3_5400u:-:::::::*
amd	ryzen_9_5900hs_firmware	-	cpe:2.3:o:amd:ryzen_9_5900hs_firmware:-:::::::*

Rows per page:

1-10 of 671

CNA Affected

[
  {
    "product": "Ryzen™ Series",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "product": "Athlon™ Series",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

References

www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

Social References

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

AI Score

5.7

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2021-26363