Not rated
CVE-2021-26382 An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor…
Description
An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ryzen™ Series | Versions not published | |
| Athlon™ Series | Versions not published |
Other CVEs of Ryzen™ Series
The 27 CVEs of Ryzen™ Series →
CVE-2021-26384
A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info…
Not rated
CVE-2021-26363
A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to…
Not rated
CVE-2021-26386
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2…
Not rated
CVE-2021-26317
Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in…
Not rated