CVE-2024-21976

Published Nov 12, 2024

Last updated 4 days ago

CVSS high 8.8

Overview

Description
Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution.
Source
psirt@amd.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
8.8
Impact score
6
Exploitability score
2
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity
HIGH

Weaknesses

psirt@amd.com
CWE-20
134c704f-9b21-4f2e-91b3-4a467353bcc0
CWE-94

Social media

Hype score
Not currently trending

  1. (CVE-2024-21974, CVE-2024-21975, CVE-2024-21976)Improper input validation in the NPU driver -> attacker supply a specially crafted pointer -> ... -> ACE https://t.co/HT7xRXDioc

    @xvonfers

    13 Nov 2024

    1502 Impressions

    4 Retweets

    20 Likes

    1 Bookmark

    0 Replies

    0 Quotes

  2. CVE-2024-21976 Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. https://t.co/5RXssxGzdu

    @CVEnew

    12 Nov 2024

    163 Impressions

    0 Retweets

    0 Likes

    1 Bookmark

    0 Replies

    0 Quotes

References