CVE-2024-21971

Published Feb 12, 2025 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Description
Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading to denial of service.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-19577 Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading to denial of service.
History
Type Values Removed Values Added
Weaknesses CWE-20
Type Values Removed Values Added
Weaknesses CWE-1220
Type Values Removed Values Added
Metrics epss

{'score': 0.00037}

epss

{'score': 0.00041}

Type Values Removed Values Added
Metrics epss

{'score': 0.00046}

epss

{'score': 0.00037}

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading to denial of service.
Weaknesses CWE-20
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Subscriptions

No data.

Weaknesses

Sources

Status
PUBLISHED
Assigner
AMD
Published
Updated
Sep 23, 2025, 9:26 PM
Reserved
Jan 3, 2024, 4:43 PM
Status
Deferred
Published
Feb 12, 2025, 12:15 AM
Modified
Jun 17, 2026, 7:10 AM