Vulnerability Intelligence Report
CVE-2021-26360
An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP.
No Active Exploit Signals
CVSS Base Score
7.8
HIGH
Exploitability:1.9
Impact Score:5.9
EPSS Probability:0.21%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-284 ↗CWE-284 Improper Access Control
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| AMD | AMD Radeon RX 6000 Series & PRO W6000 Series | AMD Radeon Software < 22.5.2 (affected), AMD Radeon Pro Software Enterprise < 22.Q2 (affected), Enterprise Driver < 22.10.20 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.213%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Advanced Micro Devices Inc. · Vendor · USA |
| Reserved | 2021-01-29T00:00:00 |
| Published | 2022-11-09T20:44:26 |
| Patch Date | 2022-11-08 |
| Last Updated | 2025-05-01T14:12:12 |
Community Chatter & Buzz