CVE-2024-21949

Improper validation of user input in the NPU driver could allow an attacker to provide a buffer with unexpected size, potentially leading to system crash.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - psirt@amd.com

Published

2024-11-12

Last modified

2024-11-14

Weaknesses

CWE-20

Affected products

• Amd Ryzen Ai Software (Amd)
• Ryzen Ai Software (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7017.html