CVE-2021-26333

Related Files

AMD Chipset Driver Information Disclosure / Memory Leak

Posted Sep 20, 2021

Authored by Kyriakos Economou | Site zeroperil.co.uk

ZeroPeril Ltd has discovered two issues inside the amdpsp.sys (v4.13.0.0) kernel driver module that ships with the AMD Chipset Drivers package for multiple AMD chipsets. The first issue is an information disclosure type security vulnerability and the second is a memory leak type bug due to insufficient releasing of all associated allocated resources upon request. The researchers have verified both in the latest Revision Number (2.13.27.501) of the package that was released the 4th of February 2021.

tags | advisory, kernel, memory leak, info disclosure

advisories | CVE-2021-26333

SHA-256 | d827c9bf70e10c8aa6de32322ba69539b034444015352799b800c077dfa9a502

Download | Favorite | View