ZeroHour

CVE-2021-26382

CVSS 3.1
4.4 medium
EPSS
<1%p9
Published
()
Modified
Description

An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.

Vendors
amd
Products
ryzen 7 5700g firmware, ryzen 7 5700ge firmware, ryzen 5 5600g firmware, ryzen 5 5600ge firmware, ryzen 3 5300g firmware, ryzen 3 5300ge firmware, ryzen 9 5980hx firmware, ryzen 9 5980hs firmware, ryzen 7 5825u firmware, ryzen 9 5900hx firmware, ryzen 9 5900hs firmware, ryzen 7 5825c firmware
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.