Skip to main content

Amd Ryzen 4000 Series Mobile Processors With Radeon Graphics CVE-2021-26380

| EUVDEUVD-2021-13186 LOW
Integer Overflow or Wraparound (CWE-190)
2026-05-15 AMD GHSA-fq4j-p777-724r
Information Disclosure Integer Overflow Amd Amd Ryzen 4000 Series Mobile Processors With Radeon Graphics Amd Athlon 3000 Series Mobile Processors With Radeon Graphics Amd Ryzen 3000 Series Desktop Processors Amd Ryzen 7030 Series Mobile Processors With Radeon Graphics Amd Ryzen Threadripper Pro 5000 Wx Series Processors Amd Ryzen 5000 Series Mobile Processors With Radeon Graphics Amd Ryzen 4000 Series Desktop Processors Amd Ryzen 5000 Series Desktop Processors Amd Ryzen 5000 Series Desktop Processors With Radeon Graphics Amd Ryzen Embedded R1000 Series Processors Amd Ryzen Embedded R2000 Series Processors Amd Ryzen Embedded V1000 Series Processors Formerly Codenamed Raven Ridge Amd Ryzen Embedded 5000 Series Processors Amd Ryzen Embedded V2000 Series Processors Amd Ryzen Embedded V3000 Series Processors Amd Ryzen Embedded V1000 Series Processors Formerly Codenamed Picasso Amd Athlon 3000 Series Desktop Processors With Radeon Graphics Amd Radeon Rx 5000 Series Graphics Products Amd Radeon Pro W5000 Series Graphics Products Amd Radeon Rx 6000 Series Graphics Products Amd Radeon Rx Vega Series Graphics Cards Amd Radeon Vii Amd Radeon Pro W6000 Series Graphics Products Amd Radeon Pro Wx 8000 9000 Series Graphics Cards Amd Radeon Pro Vii Amd Radeon Instinct Mi25 Amd Radeon Pro V520 Amd Radeon Pro V620
1.8
CVSS 4.0 · NVD

Severity by source

NVD PRIMARY
1.8 LOW
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
High
Privileges Required
High
User Interaction
None
Scope
X

Lifecycle Timeline

2
CVSS changed
May 15, 2026 - 03:22 NVD
1.8 (LOW)
CVE Published
May 15, 2026 - 02:25 cve.org
LOW 1.8

DescriptionCVE.org

A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity.

AnalysisAI

A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity. Rated low severity (CVSS 1.8). No vendor patch available.

Technical ContextAI

This vulnerability is classified as Integer Overflow (CWE-190), which allows attackers to cause unexpected behavior through arithmetic overflow. A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity. Affected products include: Amd Amd Ryzen™ 5000 Series Desktop Processors With Radeon™ Graphics, Amd Amd Ryzen™ Threadripper™ Pro 5000 Wx-Series Processors, Amd Amd Ryzen™ 7030 Series Mobile Processors With Radeon™ Graphics, Amd Amd Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics, Amd Amd Ryzen™ 5000 Series Mobile Processors With Radeon™ Graphics.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate arithmetic operations, use safe integer libraries, check bounds before allocation.

More in Amd Ryzen 4000 Series Mobile Processors With Radeon Graphics

View all
CVE-2025-54518 HIGH
7.3 May 15

Local privilege escalation affects AMD Zen 2-based processors (Ryzen 3000/4000/5000 series, Threadripper PRO 3000 WX, EP
CVE-2025-54502 HIGH
7.1 Apr 16

Local privilege escalation in the AMD Platform Configuration Blob (APCB) SMM driver, shipped in AGESA firmware across ne
CVE-2021-46747 HIGH
7.1 Jun 01

Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user sp
CVE-2025-48516 MEDIUM
6.9 May 15

DDR5 memory modules in multiple AMD Ryzen processor families contain an insecure default PMIC (Power Management Integrat
CVE-2023-20572 MEDIUM
5.6 Jun 26

An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against th

Same weakness CWE-190 – Integer Overflow or Wraparound

View all
CVE-2013-2729 CRITICAL POC
9.8
CVE-2015-8651 HIGH
8.8
CVE-2012-5054 HIGH POC
8.8
CVE-2014-0569 CRITICAL POC
9.3
CVE-2023-21716 CRITICAL POC
9.8
CVE-2017-3599 HIGH POC
7.5
CVE-2017-7529 HIGH
7.5
CVE-2016-1010 HIGH
8.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2021-26380 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy