PT-2024-10903 · Amd · Amd Athlon™ 3000 Series Desktop Processors With Radeon™ Graphics+33

Published 2024-08-13 · Updated 2024-12-12 · CVE-2021-26367

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-26367

Affected Products

Amd Athlon™ 3000 Series Desktop Processors With Radeon™ Graphics

Amd Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics

Amd Radeon™ Pro W6000 Series Graphics Cards

Amd Ryzen™ 3000 Series Mobile Processor With Radeon™ Graphics

Amd Ryzen™ 3000 Series Processors With Radeon™ Graphics

Amd Ryzen™ 4000 Series Desktop Processor With Radeon™ Graphics

Amd Ryzen™ 4000 Series Mobile Processors With Radeon™ Graphics

Amd Ryzen™ 5000 Series Desktop Processor With Radeon™ Graphics

Amd Ryzen™ 5000 Series Processors With Radeon™ Graphics

Amd Ryzen™ Embedded R1000 Series Processors

Amd Ryzen™ Embedded R2000 Series Processors

Athlon Gold 3150U Firmware

Athlon Gold 3150G Firmware

Athlon Pro 300Ge Firmware

Athlon Pro 3045B Firmware

Athlon Pro 3145B Firmware

Athlon Silver 3050U Firmware

Radeon

Ryzen 3 3300X Firmware

Ryzen 3 3350U Firmware

Ryzen 3 4300G Firmware

Ryzen 3 5300G Firmware

Ryzen 5 3450G Firmware

Ryzen 5 3500 Firmware

Ryzen 5 3550H Firmware

Ryzen 5 3580U Firmware

Ryzen 5 4600G Firmware

Ryzen 5 5600X Firmware

Ryzen 7 3700X Firmware

Ryzen 7 3750H Firmware

Ryzen 7 3780U Firmware

Ryzen 7 4700G Firmware

Ryzen 7 5700G Firmware

Ryzen 9 5980Hx Firmware

References · 8

• https://osv.dev/vulnerability/CVE-2021-26367 · Vendor Advisory
• https://amd.com/en/resources/product-security/bulletin/amd-sb-4004.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-26367 · Security Note
• https://amd.com/en/resources/product-security/bulletin/amd-sb-6005.html · Vendor Advisory
• https://t.me/cvenotify/104100 · Telegram Post
• https://twitter.com/CVEnew/status/1823407770743279852 · Twitter Post
• https://t.me/cvenotify/90438 · Telegram Post
• https://twitter.com/PorsilapongoCl/status/1823409390185025972 · Twitter Post