CVE-2021-26333

An information disclosure vulnerability exists in AMD Platform Security Processor (PSP) chipset driver. The discretionary access control list (DACL) may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages.

• CWE-200
• CWE-909

• http://packetstormsecurity.com/files/164202/AMD-Chipset-Driver-Information-Disclosure-Memory-Leak.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2021/Sep/24Mailing List, Third Party Advisory
• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1009Vendor Advisory
• http://packetstormsecurity.com/files/164202/AMD-Chipset-Driver-Information-Disclosure-Memory-Leak.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2021/Sep/24Mailing List, Third Party Advisory
• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1009Vendor Advisory

Published

Sep 21, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-26327Insufficient validation of guest context in the SNP Firmware…5.5
• CVE-2021-26328Failure to verify the mode of CPU execution at the time of S…4.4
• CVE-2021-26329AMD System Management Unit (SMU) may experience an integer o…5.5
• CVE-2021-26330AMD System Management Unit (SMU) may experience a heap-based…5.5
• CVE-2021-26331AMD System Management Unit (SMU) contains a potential issue …7.8
• CVE-2021-26332Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW…7.1
• CVE-2021-26334The AMDPowerProfiler.sys driver of AMD μProf tool may allow …9.9
• CVE-2021-26335Improper input and range checking in the AMD Secure Processo…7.8
• CVE-2021-26336Insufficient bounds checking in System Management Unit (SMU)…5.5
• CVE-2021-26337Insufficient DRAM address validation in System Management Un…5.5
• CVE-2021-26338Improper access controls in System Management Unit (SMU) may…7.5
• CVE-2021-26339A bug in AMD CPU’s core logic may allow for an attacker, usi…5.5