5.5
Medium
CVE-2024-21949 Improper validation of user input in the NPU driver could allow an attacker to provide a buffer with unexpected size,…
Description
Improper validation of user input in the NPU driver could allow an attacker to provide a buffer with unexpected size, potentially leading to system crash.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Ryzen™ AI Software 1.2 | earliest → < 1.2 | 1.2 |
| ryzen_ai_software 1.2 | earliest → < 1.2 | 1.2 |
Other CVEs of AMD Ryzen™ AI Software
The 8 CVEs of AMD Ryzen™ AI Software →
CVE-2024-36336
Integer overflow within the AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to a…
7.9
High
CVE-2024-36328
Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to…
7.3
High
CVE-2024-36337
Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to…
7.9
High
CVE-2025-0014
Incorrect default permissions on the AMD Ryzen(TM) AI installation folder could allow an attacker to achieve privilege…
7.3
High