CVE-2021-26392

CVE-2021-26392: vulnerability in AMD Radeon RX 5000 Series & PRO W5000 Series

Published · Updated

Follow this CVE+ Monitor AMD Ryzen™ Embedded+ Monitor AMD Radeon RX 5000 Series & PRO W5000 Series

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.3%
Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA.
Affected products
AMD · AMD Radeon RX 5000 Series & PRO W5000 SeriesAMD · AMD Radeon RX 6000 Series & PRO W6000 SeriesAMD · AMD Ryzen™ Embedded 5000AMD · AMD Ryzen™ Embedded R1000AMD · AMD Ryzen™ Embedded R2000AMD · AMD Ryzen™ Embedded V1000AMD · AMD Ryzen™ Embedded V2000AMD · AMD Ryzen™Embedded V3000
Related CVEs — AMD Radeon RX 5000 Series & PRO W5000 Series

In the same product, most dangerous first.

CVE-2023-31315HIGHCVE-2023-31315EPSS 0.6%CVE-2020-12930—CVE-2020-12930EPSS 0.3%CVE-2020-12931—CVE-2020-12931EPSS 0.3%CVE-2021-26393—CVE-2021-26393EPSS 0.3%CVE-2021-26360HIGHCVE-2021-26360EPSS 0.2%CVE-2024-0179HIGHCVE-2024-0179EPSS 0.2%