CVE-2025-21424 Use After Free in NPU

Memory corruption while calling the NPU driver APIs concurrently...

CVE-2025-21424 Use After Free in NPU

Memory corruption while calling the NPU driver APIs concurrently...

CVE-2024-43052

Memory corruption while processing API calls to NPU with invalid input...

CVE-2024-43052

Memory corruption while processing API calls to NPU with invalid input...

CVE-2024-33037

Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesnt validate the IPC message received from the firmware...

CVE-2024-43052 Improper Input Validation in Video Analytics and Processing

Memory corruption while processing API calls to NPU with invalid input...

CVE-2024-43052

CVE-2024-43052 : Memory corruption while processing API calls to the NPU with invalid input. Connected sources corroborate a Qualcomm/NPU-origin issue affecting NPU API handling, with attack vector reported as local and low complexity but resulting in high impact on confidentiality, integrity, an...

CVE-2024-33037

CVE-2024-33037 describes information disclosure in Qualcomm NPU stack: the NPU firmware can send an invalid IPC message to the NPU driver, and the driver does not validate the IPC message, enabling potential disclosure of sensitive information. Documents consistently identify the root cause as un...

CVE-2024-33037 Buffer Over-read in Neural Processing Unit

Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesnt validate the IPC message received from the firmware...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a series of chipsets from Qualcomm, Inc. A security vulnerability exists in Qualcomm Chipsets that stems from a possible memory corruption when processing NPU API calls with invalid inputs if the inputs are not validated...

CVE-2024-21975

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution...

CVE-2024-21975

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution...

CVE-2024-21974

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution...

CVE-2024-21974

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution...

CVE-2024-21976

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution...

CVE-2024-21949

Improper validation of user input in the NPU driver could allow an attacker to provide a buffer with unexpected size, potentially leading to system crash...

CVE-2024-21976

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution...

CVE-2024-21976

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution...

CVE-2024-21976

CVE-2024-21976 concerns the AMD Ryzen AI Software NPU driver (AMD XDNA) with an input-validation flaw that could let an attacker supply a crafted pointer and achieve arbitrary code execution. The NVD entry rates it as CVSS v3.1 8.8 ( HIGH, LOCAL, privileges required LOW, user interaction NONE; im...

CVE-2024-21975

CVE-2024-21975 involves improper input validation in the AMD NPU driver used by AMD Ryzen AI Software (NPU in AMD XDNA). The vulnerability could allow a local attacker to supply a specially crafted pointer, potentially enabling arbitrary code execution. The issue is tied to the NPU driver compone...