341 matches found
CVE-2023-30639
Archer Platform 6.8 before 6.12 P6 HF1 6.12.0.6.1 contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. 6.11.P4 6.11.0.4 is also a fixed release...
Cross site scripting
Archer Platform 6.8 before 6.12 P6 HF1 6.12.0.6.1 contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. 6.11.P4 6.11.0.4 is also a fixed release...
CVE-2022-33225
Memory corruption due to use after free in trusted application environment...
Memory corruption
Memory corruption due to use after free in trusted application environment...
CVE-2022-33225 Use after free in Trusted Application Environment
Memory corruption due to use after free in trusted application environment...
CVE-2022-33225
CVE-2022-33225 is a memory corruption due to use-after-free in a trusted application environment. Public Red Hat and NVD entries corroborate memory-corruption impact; the vulnerability is linked to Qualcomm components (bootloader/trusted environment). The Pixel bulletin lists CVE-2022-33225 under...
CVE-2022-33225 Use after free in Trusted Application Environment
Memory corruption due to use after free in trusted application environment...
PT-2023-13247 · Unknown · Trusted Application Environment
Name of the Vulnerable Software and Affected Versions: Trusted Application Environment affected versions not specified Description: The issue is related to memory corruption due to use after free in the trusted application environment. Recommendations: At the moment, there is no information about...
CVE-2021-26391
A flaw was found in hw. Insufficient verification of multiple header signatures while loading a Trusted Application TA may allow an attacker with privileges to gain code execution in that TA or the OS/kernel. Mitigation Please contact AMD for more updates on this flaw...
CVE-2021-26393
Insufficient memory cleanup in the AMD Secure Processor ASP Trusted Execution Environment TEE may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of...
CVE-2021-26391
Insufficient verification of multiple header signatures while loading a Trusted Application TA may allow an attacker with privileges to gain code execution in that TA or the OS/kernel...
CVE-2021-26391
Insufficient verification of multiple header signatures while loading a Trusted Application TA may allow an attacker with privileges to gain code execution in that TA or the OS/kernel...
Authorization
Insufficient verification of multiple header signatures while loading a Trusted Application TA may allow an attacker with privileges to gain code execution in that TA or the OS/kernel...
CVE-2021-26391
Insufficient verification of multiple header signatures while loading a Trusted Application TA may allow an attacker with privileges to gain code execution in that TA or the OS/kernel...
CVE-2021-26391
Insufficient verification of multiple header signatures while loading a Trusted Application TA may allow an attacker with privileges to gain code execution in that TA or the OS/kernel...
CVE-2021-26391
CVE-2021-26391 affects AMD firmware/TPM-like trust environment: insufficient verification of multiple header signatures when loading a Trusted Application (TA) may allow a privileged attacker to gain code execution in the TA or OS/kernel. AMD-SB-4001 lists this CVE as Medium severity and provides...
PT-2022-9757 · Amd · Amd Secure Processor
Name of the Vulnerable Software and Affected Versions: AMD Secure Processor ASP affected versions not specified Description: The issue is related to insufficient memory cleanup in the AMD Secure Processor ASP Trusted Execution Environment TEE. This may allow an authenticated attacker with...
PT-2022-9756 · Amd · Amd Radeon Rx 5000 Series & Pro W5000 Series +66
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to insufficient verification of a missing size check in the 'LoadModule' function, which may lead to an out-of-bounds write. This...
PT-2022-9755 · Amd · Amd Radeon Rx 5000 Series & Pro W5000 Series +15
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to insufficient verification of multiple header signatures while loading a Trusted Application TA, which may allow an attacker with...
AMD Radeon 安全漏洞
AMD Radeon is a device driver and utility software package for Advanced Micro Devices graphics cards and GPUs from UltraMicro Semiconductor AMD. A security vulnerability exists in AMD Radeon that stems from insufficient validation of multiple header signatures when loading a trusted application T...