CVE-2024-21971
Quick assessment
Affected
AMD AMD Ryzen™ 5000 Series Desktop Processors
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
AMD Graphics Driver是美国超威半导体（AMD）公司的一款集成显卡驱动程序。 AMD Graphics Driver存在输入验证错误漏洞，该漏洞源于不正确的输入验证可能允许攻击者向内核模式驱动程序提供Windows®系统进程ID，从而导致操作系统崩溃，并可能导致拒绝服务。
Possible ATT&CK Techniques 2 AI
T1499.002 · Service Exhaustion Flood T1059 · Command and Scripting Interpreter
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-21971
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading to denial of service.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1220
Source: CVE Program / CVE List V5
Vulnerability Title
AMD Graphics Driver 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AMD Graphics Driver是美国超威半导体（AMD）公司的一款集成显卡驱动程序。 AMD Graphics Driver存在输入验证错误漏洞，该漏洞源于不正确的输入验证可能允许攻击者向内核模式驱动程序提供Windows®系统进程ID，从而导致操作系统崩溃，并可能导致拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| AMD | AMD Ryzen™ 5000 Series Desktop Processors | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Ryzen™ 7000 Series Desktop Processors | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Ryzen™ 7030 Series Processors with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Ryzen™ 7045 Series Mobile Processors | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Radeon™ RX 5000 Series Graphics Products | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Radeon™ PRO W5000 Series Graphics Products | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Radeon™ RX 7000 Series Graphics Products | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Radeon™ PRO W7000 Series Graphics Products | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
|
| AMD | AMD Radeon™ VII | AMD Software: Adrenalin Edition 24.7.1 (23.19.16) | - |
|
| AMD | AMD Radeon™ PRO VII | AMD Software: Adrenalin Edition 24.7.1 (23.19.16) | - |
|
| AMD | AMD Radeon™ Instinct™ MI25 | Contact your AMD Customer Engineering representative | - |
|
| AMD | AMD Radeon™ PRO V520 | Contact your AMD Customer Engineering representative | - |
|
| AMD | AMD Radeon™ PRO V620 | Contact your AMD Customer Engineering representative | - |
|
| AMD | AMD Radeon™ PRO V710 | Contact your AMD Customer Engineering representative | - |
|
| AMD | AMD Ryzen™ Embedded R1000 | 24.10.21.01 | - |
|
| AMD | AMD Ryzen™ Embedded R2000 | 24.10.21.01 | - |
|
| AMD | AMD Ryzen™ Embedded 7000 | 24.10.21.01 | - |
|
| AMD | AMD Ryzen™ Embedded V1000 | 24.10.21.01 | - |
|
II. Public POCs for CVE-2024-21971
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-21971
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-21971 (1)
IV. Related Vulnerabilities
Same weakness: CWE-1220
-
CVE-2026-78122
docker-socket-proxy through 0.5.0 Insufficient Access Contro -
CVE-2026-40145
Control protections bypass in BeyondTrust Endpoint Privilege -
CVE-2026-68868
Apache Airflow Google provider: google Secret Manager backen -
CVE-2026-62721
Windows User-Mode Power Service (UMPS) Elevation of Privileg -
CVE-2026-16560
389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swa
V. Comments for CVE-2024-21971
No comments yet