Out-of-bounds Write Vulnerability in AMD Product
CVE-2021-26392
7.8HIGH
Key Information:
- Vendor
Amd
- Status
- Vendor
- CVE Published:
- 9 November 2022
What is CVE-2021-26392?
The vulnerability arises from insufficient verification of size checks in the 'LoadModule' functionality, which may permit an out-of-bounds write. This flaw could potentially allow an attacker with appropriate privileges to execute code at the OS or kernel level by loading a malicious Trusted Application (TA), raising significant security concerns for affected AMD products.
Affected Version(s)
AMD Radeon RX 5000 Series & PRO W5000 Series AMD Radeon Software < 22.5.2
AMD Radeon RX 5000 Series & PRO W5000 Series AMD Radeon Pro Software Enterprise < 22.Q2
AMD Radeon RX 5000 Series & PRO W5000 Series Enterprise Driver < 22.10.20