CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2021-26392
High (7.8) in amd. EPSS 0.3% chance of exploitation in the next 30 days.
Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- amd:amd_3015ce_firmware
- amd:amd_3015e_firmware
- amd:amd_3020e_firmware
- amd:athlon_gold_3150c_firmware
- amd:athlon_gold_3150u_firmware
- amd:athlon_pro_3045b_firmware
- amd:athlon_pro_3145b_firmware
- amd:athlon_silver_3050c_firmware
- amd:athlon_silver_3050e_firmware
- amd:athlon_silver_3050u_firmware
- amd:enterprise_driver
- amd:radeon_pro_software
- amd:radeon_rx_vega_56_firmware
- amd:radeon_rx_vega_64_firmware
- amd:radeon_software
- amd:ryzen_3_2200g_firmware
- amd:ryzen_3_2200ge_firmware
- amd:ryzen_3_2200u_firmware
- amd:ryzen_3_2300u_firmware
- amd:ryzen_3_3100_firmware
- amd:ryzen_3_3200g_firmware
- amd:ryzen_3_3250c_firmware
- amd:ryzen_3_3250u_firmware
- amd:ryzen_3_3300u_firmware
- amd:ryzen_3_3300x_firmware
- amd:ryzen_3_3350u_firmware
- amd:ryzen_3_5300g_firmware
- amd:ryzen_3_5300ge_firmware
- amd:ryzen_3_5300u_firmware
- amd:ryzen_3_5400u_firmware
- amd:ryzen_3_pro_3200g_firmware
- amd:ryzen_3_pro_3200ge_firmware
- amd:ryzen_5_2400g_firmware
- amd:ryzen_5_2400ge_firmware
- amd:ryzen_5_2500u_firmware
- amd:ryzen_5_2600h_firmware
- amd:ryzen_5_3400g_firmware
- amd:ryzen_5_3450u_firmware
- amd:ryzen_5_3500_firmware
- amd:ryzen_5_3500c_firmware
- amd:ryzen_5_3500u_firmware
- amd:ryzen_5_3500x_firmware
- amd:ryzen_5_3550h_firmware
- amd:ryzen_5_3580u_firmware
- amd:ryzen_5_3600_firmware
- amd:ryzen_5_3600x_firmware
- amd:ryzen_5_3600xt_firmware
- amd:ryzen_5_5500_firmware
- amd:ryzen_5_5500u_firmware
- amd:ryzen_5_5560u_firmware