HIGH🇵🇱 Wersja polska

CVE-2017-5926

CVSS 7.5v3.0pub. 2017-02-27upd. 2026-05-13

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Allwinner A64

    HW
    Allwinner
    all versions

  • Amd Athlon Ii 640 X4

    HW
    Amd
    all versions

  • Amd E 350

    HW
    Amd
    all versions

  • Amd Fx 8120 8 Core

    HW
    Amd
    all versions

  • Amd Fx 8320 8 Core

    HW
    Amd
    all versions

  • Amd Fx 8350 8 Core

    HW
    Amd
    all versions

  • Amd Phenom 9550 4 Core

    HW
    Amd
    all versions

  • Intel Atom C2750

    HW
    Intel
    all versions

  • Intel Celeron N2840

    HW
    Intel
    all versions

  • Intel Core I5 M480

    HW
    Intel
    all versions

  • Intel Core I7 2620qm

    HW
    Intel
    all versions

  • Intel Core I7 3632qm

    HW
    Intel
    all versions

  • Intel Core I7 4500u

    HW
    Intel
    all versions

  • Intel Core I7 6700k

    HW
    Intel
    all versions

  • Intel Core I7 920

    HW
    Intel
    all versions

  • Intel Xeon E3 1240 V5

    HW
    Intel
    all versions

  • Intel Xeon E5 2658 V2

    HW
    Intel
    all versions

  • Nvidia Tegra K1 Cd570m A1

    HW
    Nvidia
    all versions

  • Nvidia Tegra K1 Cd580m A1

    HW
    Nvidia
    all versions

  • Samsung Exynos 5800

    HW
    Samsung
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-38102HIGH7.2same product

Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versio...

CVE-2021-0189HIGH7.8same product

Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged us...

CVE-2021-0188HIGH7.8same product

Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow ...

CVE-2020-12360HIGH7.8same product

Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially...

CVE-2020-24489HIGH8.8same product

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escala...