CVE-2024-21949

CVE-2024-21949 affects the NPU driver in AMD Ryzen AI Software. The vulnerability stems from improper validation of user input, allowing an attacker to supply a buffer of unexpected size, potentially causing a system crash (availability impact). The issue is documented across multiple feeds (NVD,...

CVE-2024-21974

CVE-2024-21974 concerns AMD Ryzen AI Software NPU Driver (AMD XDNA). Multiple sources corroborate a vulnerability due to improper input validation in the NPU driver, which could allow an attacker to supply a crafted pointer and potentially achieve arbitrary code execution . The vulnerability is c...

CVE-2024-21975

CVE-2024-21975 involves improper input validation in the AMD NPU driver used by AMD Ryzen AI Software (NPU in AMD XDNA). The vulnerability could allow a local attacker to supply a specially crafted pointer, potentially enabling arbitrary code execution. The issue is tied to the NPU driver compone...