Vulnerability · Published Nov 9, 2022 · Assigned by AMD
CVE-2021-26360
High 7.8
In plain English
A high-severity improper access control in AMD Radeon RX 6000 Series & PRO W6000 Series from AMD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 85.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| AMD | AMD Radeon RX 6000 Series & PRO W6000 Series | AMD Radeon Software – before 22.5.2AMD Radeon Pro Software Enterprise – before 22.Q2Enterprise Driver – before 22.10.20 |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H