cve/2021/CVE-2021-26393.md

CVE-2021-26393

Description

Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.

POC

Reference

• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029
• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-5001

Github

No PoCs found on GitHub currently.