CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2021-26391
High (7.8) in amd. EPSS 0.2% chance of exploitation in the next 30 days.
Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the OS/kernel.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
- CWE
- CWE-347
- Published
- Modified
- Record from
- the NVD, synced
Affected
- amd:enterprise_driver
- amd:radeon_pro_software
- amd:radeon_rx_vega_56_firmware
- amd:radeon_rx_vega_64_firmware
- amd:radeon_software
- amd:ryzen_3_5300g_firmware
- amd:ryzen_3_5300ge_firmware
- amd:ryzen_3_5300u_firmware
- amd:ryzen_3_5400u_firmware
- amd:ryzen_5_5500u_firmware
- amd:ryzen_5_5560u_firmware
- amd:ryzen_5_5600g_firmware
- amd:ryzen_5_5600ge_firmware
- amd:ryzen_5_5600h_firmware
- amd:ryzen_5_5600hs_firmware
- amd:ryzen_5_5600u_firmware
- amd:ryzen_7_5700g_firmware
- amd:ryzen_7_5700ge_firmware
- amd:ryzen_7_5700u_firmware
- amd:ryzen_7_5800h_firmware
- amd:ryzen_7_5800hs_firmware
- amd:ryzen_7_5800u_firmware
- amd:ryzen_9_5900hs_firmware
- amd:ryzen_9_5900hx_firmware
- amd:ryzen_9_5980hs_firmware
- amd:ryzen_9_5980hx_firmware