Vulnerability in Amd Radeon Rx 6000 Series & Pro W6000
CVE-2021-26360
An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to…
EPSS: 0.002 (11.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Amd Radeon Rx 6000 Series & Pro W6000 — versions AMD Radeon Software, AMD Radeon Pro Software Enterprise, Enterprise Driver
- Amd Enterprise_driver
- Amd Radeon_pro_software
- Amd Radeon_pro_w6300m
- Amd Radeon_pro_w6400
- Amd Radeon_pro_w6500m
- Amd Radeon_pro_w6600
- Amd Radeon_pro_w6600m
- Amd Radeon_pro_w6600x
- Amd Radeon_pro_w6800
Weakness classification (CWE)
References
- psirt@amd.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2021-26360?
- CVE-2021-26360 is a high-severity vulnerability in Amd Radeon Rx 6000 Series & Pro W6000, classified under Improper Access Control. CVSS score: 7.8/10. Published 2022-11-09.
- How severe is CVE-2021-26360?
- High severity. CVSS v3 base score is 7.8 out of 10.