8.8
High
CVE-2024-21974 Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially…
Description
Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Ryzen™ AI Software 1.2 | earliest → < 1.2 | 1.2 |
| ryzen_ai_software 1.2 | earliest → < 1.2 | 1.2 |
Other CVEs of AMD Ryzen™ AI Software
The 8 CVEs of AMD Ryzen™ AI Software →
CVE-2024-36336
Integer overflow within the AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to a…
7.9
High
CVE-2024-36328
Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to…
7.3
High
CVE-2024-36337
Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to…
7.9
High
CVE-2025-0014
Incorrect default permissions on the AMD Ryzen(TM) AI installation folder could allow an attacker to achieve privilege…
7.3
High