CVE-2021-26380

Trusted OS Driver Vulnerability Allowing Out‑of‑Bounds Memory Access

Published May 15, 2026 CVSS 4.0 · 1.8 Low EPSS < 1% KEV · Not listed
Description
A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity.

Analysis

AI-generated

Technical impact

The vulnerability arises when a compromised Trusted OS driver issues a malformed instruction allowing it to read or write memory beyond its allocated bounds. This can corrupt data, leading to integrity violations of system memory and critical structures. The weakness is a classic out‑of‑bounds access flaw (CWE‑190).

Affected Systems

AMD processors and graphics products in the 3000 to 7030 series, including Ryzen, Athlon and Radeon series listed in the CVE data. Versions affected are unspecified; any hardware with the documented Trusted OS driver is vulnerable until updated by a vendor release.

Risk and Exploitability

The CVSS score of 1.8 indicates a low overall severity. No EPSS data is available, and the vulnerability is not in the CISA KEV catalog, suggesting limited exploitation likelihood. The attack vector remains unclear; it is inferred that a local adversary with the ability to execute code within the Trusted OS space would need to construct the malformed call to exploit it.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest AMD firmware or driver update that corrects the Trusted OS memory access flaw.
  • Reboot the platform to ensure the updated driver is active.
  • Verify Trusted OS driver integrity by checking cryptographic signatures or using AMD Security tools, and remove any untrusted or custom drivers.

Generated by OpenCVE AI on May 15, 2026 at 04:25 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Amd
Amd athlon 3000 Series Mobile Processors With Radeon Graphics
Amd radeon Instinct Mi25
Amd radeon Pro V520
Amd radeon Pro V620
Amd radeon Pro Vii
Amd radeon Pro W5000 Series
Amd radeon Pro W6000 Series
Amd radeon Pro Wx 8000 Series
Amd radeon Pro Wx 9000 Series
Amd radeon Rx 5000 Series
Amd radeon Rx 6000 Series
Amd radeon Rx Vega Series
Amd radeon Vii
Amd ryzen 3000 Series Desktop Processors
Amd ryzen 4000 Series Desktop Processors
Amd ryzen 4000 Series Mobile Processors With Radeon Graphics
Amd ryzen 5000 Series Desktop Processors
Amd ryzen 5000 Series Desktop Processors With Radeon Graphics
Amd ryzen 5000 Series Mobile Processors With Radeon Graphics
Amd ryzen 7030 Series Mobile Processors With Radeon Graphics
Amd ryzen Embedded 5000 Series Processors
Amd ryzen Embedded R1000 Series Processors
Amd ryzen Embedded R2000 Series Processors
Amd ryzen Embedded V1000 Series Processors
Amd ryzen Embedded V2000 Series Processors
Amd ryzen Embedded V3000 Series Processors
Amd ryzen Threadripper Pro 5000 Wx-series Processors
Vendors & Products Amd
Amd athlon 3000 Series Mobile Processors With Radeon Graphics
Amd radeon Instinct Mi25
Amd radeon Pro V520
Amd radeon Pro V620
Amd radeon Pro Vii
Amd radeon Pro W5000 Series
Amd radeon Pro W6000 Series
Amd radeon Pro Wx 8000 Series
Amd radeon Pro Wx 9000 Series
Amd radeon Rx 5000 Series
Amd radeon Rx 6000 Series
Amd radeon Rx Vega Series
Amd radeon Vii
Amd ryzen 3000 Series Desktop Processors
Amd ryzen 4000 Series Desktop Processors
Amd ryzen 4000 Series Mobile Processors With Radeon Graphics
Amd ryzen 5000 Series Desktop Processors
Amd ryzen 5000 Series Desktop Processors With Radeon Graphics
Amd ryzen 5000 Series Mobile Processors With Radeon Graphics
Amd ryzen 7030 Series Mobile Processors With Radeon Graphics
Amd ryzen Embedded 5000 Series Processors
Amd ryzen Embedded R1000 Series Processors
Amd ryzen Embedded R2000 Series Processors
Amd ryzen Embedded V1000 Series Processors
Amd ryzen Embedded V2000 Series Processors
Amd ryzen Embedded V3000 Series Processors
Amd ryzen Threadripper Pro 5000 Wx-series Processors
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Title Trusted OS Driver Vulnerability Allowing Out‑of‑Bounds Memory Access
Type Values Removed Values Added
Description A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity.
Weaknesses CWE-190
References
Metrics cvssV4_0

{'score': 1.8, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N'}

Weaknesses
  • CWE-190

    Integer Overflow or Wraparound

Sources

Status
PUBLISHED
Assigner
AMD
Published
Updated
May 15, 2026, 1:21 PM
Reserved
Jan 29, 2021, 9:24 PM
Status
Awaiting Analysis
Published
May 15, 2026, 3:16 AM
Modified
Jun 17, 2026, 3:43 AM