CVE-2021-26393: AMD 3015ce Firmware

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.

Affected products

AMD AMD 3015ce Firmware: affected versions not specified
AMD AMD 3015e Firmware: affected versions not specified
AMD AMD 3020e Firmware: affected versions not specified
AMD Athlon Gold 3150c Firmware: affected versions not specified
AMD Athlon Gold 3150u Firmware: affected versions not specified
AMD Athlon Pro 3045b Firmware: affected versions not specified
AMD Athlon Pro 3145b Firmware: affected versions not specified
AMD Athlon Silver 3050c Firmware: affected versions not specified
AMD Athlon Silver 3050e Firmware: affected versions not specified
AMD Athlon Silver 3050u Firmware: affected versions not specified
AMD Enterprise Driver: before 22.10.20 (fixed in 22.10.20)
AMD Radeon Pro Software: before 22.q2 (fixed in 22.q2)
AMD Radeon Rx Vega 56 Firmware: affected versions not specified
AMD Radeon Rx Vega 64 Firmware: affected versions not specified
AMD Radeon Software: before 22.5.2 (fixed in 22.5.2)
AMD Ryzen 3 2200g Firmware: affected versions not specified
AMD Ryzen 3 2200ge Firmware: affected versions not specified
AMD Ryzen 3 2200u Firmware: affected versions not specified
AMD Ryzen 3 2300u Firmware: affected versions not specified
AMD Ryzen 3 3200g Firmware: affected versions not specified
AMD Ryzen 3 3250c Firmware: affected versions not specified
AMD Ryzen 3 3250u Firmware: affected versions not specified
AMD Ryzen 3 3300u Firmware: affected versions not specified
AMD Ryzen 3 3350u Firmware: affected versions not specified
AMD Ryzen 3 5300g Firmware: affected versions not specified
and 42 more

Published 2022-11-09. Last modified 2026-06-17.