CVE-2021-26382

mediumpriority · track · 18EPSS 0.002 · 8 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.19% (8th) EPSS

CVSS 4.4 · medium

Is it mine?

37 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-27

An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.

cvss

Technical severity, 0–10. One row per scoring source.

4.4

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.14.4mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 0.8 · impact 3.6

v3.14.1mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-400USLLM-inferred

affected products (37)

Products and version ranges known to be affected.

AMD Athlon™ Seriesall versionsenisa_euvdEU
AMD Ryzen™ Seriesall versionsenisa_euvdEU
amd ryzen 3 3200u firmware< renoirpi-fp6_1.0.0.7nvdUScpe:2.3:o:amd:ryzen_3_3200u_firmware:*:*:*:*:*:*:*:*
amd ryzen 3 3250u firmware< renoirpi-fp6_1.0.0.7nvdUScpe:2.3:o:amd:ryzen_3_3250u_firmware:*:*:*:*:*:*:*:*
amd ryzen 3 3300u firmware< renoirpi-fp6_1.0.0.7nvdUScpe:2.3:o:amd:ryzen_3_3300u_firmware:*:*:*:*:*:*:*:*
amd ryzen 3 5125c firmware< cezannepi-fp6_1.0.0.9nvdUScpe:2.3:o:amd:ryzen_3_5125c_firmware:*:*:*:*:*:*:*:*
amd ryzen 3 5300g firmware< comboam4_v2_pi_1.2.0.6cnvdUScpe:2.3:o:amd:ryzen_3_5300g_firmware:*:*:*:*:*:*:*:*
amd ryzen 3 5300ge firmware< comboam4_v2_pi_1.2.0.6cnvdUScpe:2.3:o:amd:ryzen_3_5300ge_firmware:*:*:*:*:*:*:*:*
amd ryzen 3 5400u firmware< cezannepi-fp6_1.0.0.9nvdUScpe:2.3:o:amd:ryzen_3_5400u_firmware:*:*:*:*:*:*:*:*
amd ryzen 3 5425c firmware< cezannepi-fp6_1.0.0.9nvdUScpe:2.3:o:amd:ryzen_3_5425c_firmware:*:*:*:*:*:*:*:*
amd ryzen 3 5425u firmware< cezannepi-fp6_1.0.0.9nvdUScpe:2.3:o:amd:ryzen_3_5425u_firmware:*:*:*:*:*:*:*:*
amd ryzen 5 3500u firmware< renoirpi-fp6_1.0.0.7nvdUScpe:2.3:o:amd:ryzen_5_3500u_firmware:*:*:*:*:*:*:*:*
amd ryzen 5 3550h firmware< renoirpi-fp6_1.0.0.7nvdUScpe:2.3:o:amd:ryzen_5_3550h_firmware:*:*:*:*:*:*:*:*
amd ryzen 5 3580u firmware< renoirpi-fp6_1.0.0.7nvdUScpe:2.3:o:amd:ryzen_5_3580u_firmware:*:*:*:*:*:*:*:*
amd ryzen 5 5560u firmware< cezannepi-fp6_1.0.0.9nvdUScpe:2.3:o:amd:ryzen_5_5560u_firmware:*:*:*:*:*:*:*:*
amd ryzen 5 5600g firmware< comboam4_v2_pi_1.2.0.6cnvdUScpe:2.3:o:amd:ryzen_5_5600g_firmware:*:*:*:*:*:*:*:*
amd ryzen 5 5600ge firmware< comboam4_v2_pi_1.2.0.6cnvdUScpe:2.3:o:amd:ryzen_5_5600ge_firmware:*:*:*:*:*:*:*:*
amd ryzen 5 5600h firmware< cezannepi-fp6_1.0.0.9nvdUScpe:2.3:o:amd:ryzen_5_5600h_firmware:*:*:*:*:*:*:*:*
amd ryzen 5 5600hs firmware< cezannepi-fp6_1.0.0.9nvdUScpe:2.3:o:amd:ryzen_5_5600hs_firmware:*:*:*:*:*:*:*:*
amd ryzen 5 5600u firmware< cezannepi-fp6_1.0.0.9nvdUScpe:2.3:o:amd:ryzen_5_5600u_firmware:*:*:*:*:*:*:*:*

showing 20 of 37

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2022-07-14modified 2026-06-17

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan