CVE-2024-36336

Integer overflow within the AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to a loss of confidentiality, integrity, or availability.

Score

CVSS 3.1 7.9 High

Status

Deferred - psirt@amd.com

Published

2025-04-02

Last modified

2025-04-02

Weaknesses

CWE-190

Affected products

• Amd Ryzen Ai Software (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7037.html