Description (CNA)
Insufficient bounds checking in AMD TEE (Trusted Execution Environment) could allow an attacker with a compromised userspace to invoke a command with malformed arguments leading to out of bounds memory access, potentially resulting in loss of integrity or availability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AMD / AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics | unaffected CezannePI-FP6 1.0.0.6 |
| AMD / AMD Ryzen™ 4000 Series Desktop Processors | unaffected ComboAM4v2 PI 1.2.0.5 |
| AMD / AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics | unaffected CezannePI-FP6 1.0.0.6 |
| AMD / AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics | unaffected ComboAM4v2 PI 1.2.0.5 |
| AMD / AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics | unaffected RenoirPI-FP6 1.0.0.7 |
| AMD / AMD Ryzen™ Embedded V2000 Series Processors | unaffected EmbeddedPI-FP6_1.0.0.6 |
| AMD / AMD Radeon™ RX 5000 Series Graphics Products | unaffected AMD Software: Adrenalin Edition 23.2.1 (22.40.01.45) |
| AMD / AMD Radeon™ RX 6000 Series Graphics Products | unaffected AMD Software: Adrenalin Edition 23.2.1 (22.40.01.45) |
| AMD / AMD Radeon™ PRO W5000 Series Graphics Products | unaffected AMD Software: PRO Edition 23.Q1 (22.40.37.05) |
| AMD / AMD Radeon™ PRO W6000 Series Graphics Products | unaffected AMD Software: PRO Edition 23.Q1 (22.40.37.05) |
| AMD / AMD Instinct™ MI210 | unaffected ROCm 6.4 |
| AMD / AMD Instinct™ MI250 | unaffected ROCm 6.4 |
| AMD / AMD Radeon™ PRO V520 Graphics Products | unaffected Contact your AMD Customer Engineering representative |
| AMD / AMD Radeon™ PRO V620 Graphics Products | unaffected Contact your AMD Customer Engineering representative |
CWE
CWE-787
References
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html
ADP enrichment
No English description supplied.
No references supplied.