Amd Ryzen 5000 Series Desktop Processors With Radeon Graphics CVE-2021-26380

Q: What is the CVSS score of CVE-2021-26380?

CVE-2021-26380 has a CVSS 4.0 base score of 1.8 (Low). CVSS vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2021-13186 LOW

Integer Overflow or Wraparound (CWE-190)

2026-05-15 AMD

GHSA-fq4j-p777-724r

Information Disclosure Integer Overflow Amd Ryzen 5000 Series Desktop Processors With Radeon Graphics Amd Ryzen Threadripper Pro 5000 Wx Series Processors Amd Ryzen 7030 Series Mobile Processors With Radeon Graphics Amd Athlon 3000 Series Mobile Processors With Radeon Graphics Amd Ryzen 5000 Series Mobile Processors With Radeon Graphics Amd Ryzen 3000 Series Desktop Processors Amd Athlon 3000 Series Desktop Processors With Radeon Graphics Amd Ryzen 4000 Series Mobile Processors With Radeon Graphics Amd Ryzen 4000 Series Desktop Processors Amd Ryzen 5000 Series Desktop Processors Amd Ryzen Embedded R1000 Series Processors Amd Ryzen Embedded R2000 Series Processors Amd Ryzen Embedded 5000 Series Processors Amd Ryzen Embedded V1000 Series Processors Formerly Codenamed Raven Ridge Amd Ryzen Embedded V1000 Series Processors Formerly Codenamed Picasso Amd Ryzen Embedded V2000 Series Processors Amd Ryzen Embedded V3000 Series Processors Amd Radeon Rx 5000 Series Graphics Products Amd Radeon Pro W5000 Series Graphics Products Amd Radeon Rx 6000 Series Graphics Products Amd Radeon Rx Vega Series Graphics Cards Amd Radeon Vii Amd Radeon Pro W6000 Series Graphics Products Amd Radeon Pro Wx 8000 9000 Series Graphics Cards Amd Radeon Pro Vii Amd Radeon Instinct Mi25 Amd Radeon Pro V520 Amd Radeon Pro V620

1.8

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

1.8 LOW

CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

May 15, 2026 - 03:22 NVD

1.8 (LOW)

CVE Published

May 15, 2026 - 02:25 cve.org

LOW 1.8

DescriptionCVE.org

A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity.

AnalysisAI

A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity. Rated low severity (CVSS 1.8). No vendor patch available.

Technical ContextAI

This vulnerability is classified as Integer Overflow (CWE-190), which allows attackers to cause unexpected behavior through arithmetic overflow. A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity. Affected products include: Amd Amd Ryzen™ 5000 Series Desktop Processors With Radeon™ Graphics, Amd Amd Ryzen™ Threadripper™ Pro 5000 Wx-Series Processors, Amd Amd Ryzen™ 7030 Series Mobile Processors With Radeon™ Graphics, Amd Amd Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics, Amd Amd Ryzen™ 5000 Series Mobile Processors With Radeon™ Graphics.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate arithmetic operations, use safe integer libraries, check bounds before allocation.