CVE-2021-26382

CVE-2021-26382: vulnerability in AMD Athlon™ Series

Published · Updated

Follow this CVE+ Monitor Athlon™ Series+ Monitor Ryzen™ Series

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%
An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.
Affected products
AMD · Athlon™ SeriesAMD · Ryzen™ Series
Related CVEs — AMD Athlon™ Series

In the same product, most dangerous first.

CVE-2020-12944—CVE-2020-12944EPSS 0.3%CVE-2021-26335—CVE-2021-26335EPSS 0.3%CVE-2021-26317—CVE-2021-26317EPSS 0.3%CVE-2021-26386—CVE-2021-26386EPSS 0.3%CVE-2021-26339—CVE-2021-26339EPSS 0.3%CVE-2021-26312—CVE-2021-26312EPSS 0.2%