PT-2022-9755 · Amd · Amd Radeon Rx 5000 Series & Pro W5000 Series+15

Mahdi Braik · Published 2022-11-09 · Updated 2022-11-23 · CVE-2021-26391

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue is related to insufficient verification of multiple header signatures while loading a Trusted Application (TA), which may allow an attacker with privileges to gain code execution in that TA or the OS/kernel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2021-26391

Affected Products

Amd Radeon Rx 5000 Series & Pro W5000 Series

Amd Radeon Rx 6000 Series & Pro W6000 Series

Enterprise Driver

Radeon Pro

Radeon Rx Vega 56 Firmware

Radeon Rx Vega 64 Firmware

Radeon

Ryzen 3 5300G Firmware

Ryzen 3 5400U Firmware

Ryzen 5 5500 Firmware

Ryzen 5 5560U Firmware

Ryzen 5 5600X Firmware

Ryzen 7 5700G Firmware

Ryzen 7 5800U Firmware

Ryzen 9 5900Hx Firmware

Ryzen 9 5980Hx Firmware

References · 4

• https://osv.dev/vulnerability/CVE-2021-26391 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-26391 · Security Note
• https://amd.com/en/corporate/product-security/bulletin/amd-sb-1029 · Vendor Advisory
• https://t.me/cibsecurity/52761 · Telegram Post