Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
6 vulnerabilities found for AMD Software: PRO Edition by AMD
CVE-2024-21937 (GCVE-0-2024-21937)
Vulnerability from nvd – Published: 2024-11-12 17:14 – Updated: 2024-11-14 16:26
VLAI
Summary
Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
Severity
7.3 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-276 - Incorrect Default Permissions
Assigner
References
1 reference
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| AMD | AMD Software: PRO Edition |
Affected:
0 , < 24.10.16
(software)
Affected: 0 , < 24.Q2 (24.10.20) (software) |
|
| AMD | AMD Software: Adrenalin Edition |
Affected:
0 , < 24.6.1 (24.10.21.01)
(software)
|
|
| AMD | AMD Software: Cloud Edition |
Affected:
0 , < 24.7.1
(software)
|
|
| amd | amd_software_pro_edition |
Affected:
0 , < 24.10.16
(custom)
Affected: 0 , < 24.q2_24.10.20 (custom) cpe:2.3:a:amd:amd_software_pro_edition:*:*:*:*:*:*:*:* |
|
| amd | amd_software_adrenalin_edition |
Affected:
0 , < 24.6.1_24.10.21.01
(custom)
cpe:2.3:a:amd:amd_software_adrenalin_edition:*:*:*:*:*:*:*:* |
|
| amd | amd_software_cloud_edition |
Affected:
0 , < 24.7.1
(custom)
cpe:2.3:a:amd:amd_software_cloud_edition:*:*:*:*:*:*:*:* |
Date Public
2024-11-12 17:00
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:amd:amd_software_pro_edition:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "amd_software_pro_edition",
"vendor": "amd",
"versions": [
{
"lessThan": "24.10.16",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "24.q2_24.10.20",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:amd:amd_software_adrenalin_edition:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "amd_software_adrenalin_edition",
"vendor": "amd",
"versions": [
{
"lessThan": "24.6.1_24.10.21.01",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:amd:amd_software_cloud_edition:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "amd_software_cloud_edition",
"vendor": "amd",
"versions": [
{
"lessThan": "24.7.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-21937",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-14T16:22:23.757990Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-14T16:26:04.560Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "AMD Software: PRO Edition",
"vendor": "AMD",
"versions": [
{
"lessThan": "24.10.16",
"status": "affected",
"version": "0",
"versionType": "software"
},
{
"lessThan": "24.Q2 (24.10.20)",
"status": "affected",
"version": "0",
"versionType": "software"
}
]
},
{
"defaultStatus": "unaffected",
"product": "AMD Software: Adrenalin Edition",
"vendor": "AMD",
"versions": [
{
"lessThan": "24.6.1 (24.10.21.01)",
"status": "affected",
"version": "0",
"versionType": "software"
}
]
},
{
"defaultStatus": "unaffected",
"product": "AMD Software: Cloud Edition",
"vendor": "AMD",
"versions": [
{
"lessThan": "24.7.1",
"status": "affected",
"version": "0",
"versionType": "software"
}
]
}
],
"datePublic": "2024-11-12T17:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(248, 249, 250);\"\u003eIncorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.\u003c/span\u003e"
}
],
"value": "Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-276",
"description": "CWE-276 Incorrect Default Permissions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-12T17:14:20.641Z",
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
"shortName": "AMD"
},
"references": [
{
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6015.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
"assignerShortName": "AMD",
"cveId": "CVE-2024-21937",
"datePublished": "2024-11-12T17:14:20.641Z",
"dateReserved": "2024-01-03T16:43:14.977Z",
"dateUpdated": "2024-11-14T16:26:04.560Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-21979 (GCVE-0-2024-21979)
Vulnerability from nvd – Published: 2024-04-23 16:36 – Updated: 2025-11-04 18:23
VLAI
Summary
An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-787 - Out-of-bounds Write
Assigner
References
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| AMD | AMD Software: Adrenalin Edition |
Affected:
0 , < 12.1.1
(custom)
|
|
| AMD | AMD Software: PRO Edition |
Affected:
0 , < 24.Q1
(custom)
|
|
| amd | radeon_directx_11_driver_dll |
Affected:
*
cpe:2.3:a:amd:radeon_directx_11_driver_dll:*:*:*:*:*:*:*:* |
Date Public
2024-04-09 16:23
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:amd:radeon_directx_11_driver_dll:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "radeon_directx_11_driver_dll",
"vendor": "amd",
"versions": [
{
"status": "affected",
"version": "*"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-21979",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-04-23T18:58:00.311801Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-06-04T17:37:40.519Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2025-11-04T18:23:18.731Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6012.html"
},
{
"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1847"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "AMD Software: Adrenalin Edition ",
"vendor": "AMD",
"versions": [
{
"lessThan": "12.1.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "AMD Software: PRO Edition",
"vendor": "AMD",
"versions": [
{
"lessThan": "24.Q1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"datePublic": "2024-04-09T16:23:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\n\n\u003cspan style=\"background-color: rgb(248, 249, 250);\"\u003eAn out of bounds write vulnerability in the AMD Radeon\u2122 user mode driver for DirectX\u003c/span\u003e\u00ae\u003cspan style=\"background-color: rgb(248, 249, 250);\"\u003e\u0026nbsp;11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.\u003c/span\u003e\n\n"
}
],
"value": "\nAn out of bounds write vulnerability in the AMD Radeon\u2122 user mode driver for DirectX\u00ae\u00a011 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.\n\n"
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-04-23T16:36:38.556Z",
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
"shortName": "AMD"
},
"references": [
{
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6012.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
"assignerShortName": "AMD",
"cveId": "CVE-2024-21979",
"datePublished": "2024-04-23T16:36:38.556Z",
"dateReserved": "2024-01-03T16:43:30.197Z",
"dateUpdated": "2025-11-04T18:23:18.731Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2024-21972 (GCVE-0-2024-21972)
Vulnerability from nvd – Published: 2024-04-23 16:36 – Updated: 2025-11-04 18:23
VLAI
Summary
An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-787 - Out-of-bounds Write
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| AMD | AMD Software: Adrenalin Edition |
Affected:
0 , < 12.1.1
(custom)
|
|
| AMD | AMD Software: PRO Edition |
Affected:
0 , < 24.Q1
(custom)
|
Date Public
2024-04-09 16:23
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-21972",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-04-23T20:24:56.540837Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-07-24T18:06:16.832Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2025-11-04T18:23:17.557Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6012.html"
},
{
"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1848"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "AMD Software: Adrenalin Edition ",
"vendor": "AMD",
"versions": [
{
"lessThan": "12.1.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "AMD Software: PRO Edition",
"vendor": "AMD",
"versions": [
{
"lessThan": "24.Q1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"datePublic": "2024-04-09T16:23:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\n\n\u003cspan style=\"background-color: rgb(248, 249, 250);\"\u003eAn out of bounds write vulnerability in the AMD Radeon\u2122 user mode driver for DirectX\u003c/span\u003e\u00ae\u003cspan style=\"background-color: rgb(248, 249, 250);\"\u003e\u0026nbsp;11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.\u003c/span\u003e\n\n"
}
],
"value": "\nAn out of bounds write vulnerability in the AMD Radeon\u2122 user mode driver for DirectX\u00ae\u00a011 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.\n\n"
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-04-23T16:36:03.933Z",
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
"shortName": "AMD"
},
"references": [
{
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6012.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
"assignerShortName": "AMD",
"cveId": "CVE-2024-21972",
"datePublished": "2024-04-23T16:36:03.933Z",
"dateReserved": "2024-01-03T16:43:30.196Z",
"dateUpdated": "2025-11-04T18:23:17.557Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2024-21937 (GCVE-0-2024-21937)
Vulnerability from cvelistv5 – Published: 2024-11-12 17:14 – Updated: 2024-11-14 16:26
VLAI
Summary
Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
Severity
7.3 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-276 - Incorrect Default Permissions
Assigner
References
1 reference
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| AMD | AMD Software: PRO Edition |
Affected:
0 , < 24.10.16
(software)
Affected: 0 , < 24.Q2 (24.10.20) (software) |
|
| AMD | AMD Software: Adrenalin Edition |
Affected:
0 , < 24.6.1 (24.10.21.01)
(software)
|
|
| AMD | AMD Software: Cloud Edition |
Affected:
0 , < 24.7.1
(software)
|
|
| amd | amd_software_pro_edition |
Affected:
0 , < 24.10.16
(custom)
Affected: 0 , < 24.q2_24.10.20 (custom) cpe:2.3:a:amd:amd_software_pro_edition:*:*:*:*:*:*:*:* |
|
| amd | amd_software_adrenalin_edition |
Affected:
0 , < 24.6.1_24.10.21.01
(custom)
cpe:2.3:a:amd:amd_software_adrenalin_edition:*:*:*:*:*:*:*:* |
|
| amd | amd_software_cloud_edition |
Affected:
0 , < 24.7.1
(custom)
cpe:2.3:a:amd:amd_software_cloud_edition:*:*:*:*:*:*:*:* |
Date Public
2024-11-12 17:00
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:amd:amd_software_pro_edition:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "amd_software_pro_edition",
"vendor": "amd",
"versions": [
{
"lessThan": "24.10.16",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "24.q2_24.10.20",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:amd:amd_software_adrenalin_edition:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "amd_software_adrenalin_edition",
"vendor": "amd",
"versions": [
{
"lessThan": "24.6.1_24.10.21.01",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:amd:amd_software_cloud_edition:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "amd_software_cloud_edition",
"vendor": "amd",
"versions": [
{
"lessThan": "24.7.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-21937",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-14T16:22:23.757990Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-14T16:26:04.560Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "AMD Software: PRO Edition",
"vendor": "AMD",
"versions": [
{
"lessThan": "24.10.16",
"status": "affected",
"version": "0",
"versionType": "software"
},
{
"lessThan": "24.Q2 (24.10.20)",
"status": "affected",
"version": "0",
"versionType": "software"
}
]
},
{
"defaultStatus": "unaffected",
"product": "AMD Software: Adrenalin Edition",
"vendor": "AMD",
"versions": [
{
"lessThan": "24.6.1 (24.10.21.01)",
"status": "affected",
"version": "0",
"versionType": "software"
}
]
},
{
"defaultStatus": "unaffected",
"product": "AMD Software: Cloud Edition",
"vendor": "AMD",
"versions": [
{
"lessThan": "24.7.1",
"status": "affected",
"version": "0",
"versionType": "software"
}
]
}
],
"datePublic": "2024-11-12T17:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(248, 249, 250);\"\u003eIncorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.\u003c/span\u003e"
}
],
"value": "Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-276",
"description": "CWE-276 Incorrect Default Permissions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-12T17:14:20.641Z",
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
"shortName": "AMD"
},
"references": [
{
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6015.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
"assignerShortName": "AMD",
"cveId": "CVE-2024-21937",
"datePublished": "2024-11-12T17:14:20.641Z",
"dateReserved": "2024-01-03T16:43:14.977Z",
"dateUpdated": "2024-11-14T16:26:04.560Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-21979 (GCVE-0-2024-21979)
Vulnerability from cvelistv5 – Published: 2024-04-23 16:36 – Updated: 2025-11-04 18:23
VLAI
Summary
An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-787 - Out-of-bounds Write
Assigner
References
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| AMD | AMD Software: Adrenalin Edition |
Affected:
0 , < 12.1.1
(custom)
|
|
| AMD | AMD Software: PRO Edition |
Affected:
0 , < 24.Q1
(custom)
|
|
| amd | radeon_directx_11_driver_dll |
Affected:
*
cpe:2.3:a:amd:radeon_directx_11_driver_dll:*:*:*:*:*:*:*:* |
Date Public
2024-04-09 16:23
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:amd:radeon_directx_11_driver_dll:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "radeon_directx_11_driver_dll",
"vendor": "amd",
"versions": [
{
"status": "affected",
"version": "*"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-21979",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-04-23T18:58:00.311801Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-06-04T17:37:40.519Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2025-11-04T18:23:18.731Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6012.html"
},
{
"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1847"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "AMD Software: Adrenalin Edition ",
"vendor": "AMD",
"versions": [
{
"lessThan": "12.1.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "AMD Software: PRO Edition",
"vendor": "AMD",
"versions": [
{
"lessThan": "24.Q1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"datePublic": "2024-04-09T16:23:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\n\n\u003cspan style=\"background-color: rgb(248, 249, 250);\"\u003eAn out of bounds write vulnerability in the AMD Radeon\u2122 user mode driver for DirectX\u003c/span\u003e\u00ae\u003cspan style=\"background-color: rgb(248, 249, 250);\"\u003e\u0026nbsp;11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.\u003c/span\u003e\n\n"
}
],
"value": "\nAn out of bounds write vulnerability in the AMD Radeon\u2122 user mode driver for DirectX\u00ae\u00a011 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.\n\n"
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-04-23T16:36:38.556Z",
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
"shortName": "AMD"
},
"references": [
{
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6012.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
"assignerShortName": "AMD",
"cveId": "CVE-2024-21979",
"datePublished": "2024-04-23T16:36:38.556Z",
"dateReserved": "2024-01-03T16:43:30.197Z",
"dateUpdated": "2025-11-04T18:23:18.731Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2024-21972 (GCVE-0-2024-21972)
Vulnerability from cvelistv5 – Published: 2024-04-23 16:36 – Updated: 2025-11-04 18:23
VLAI
Summary
An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-787 - Out-of-bounds Write
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| AMD | AMD Software: Adrenalin Edition |
Affected:
0 , < 12.1.1
(custom)
|
|
| AMD | AMD Software: PRO Edition |
Affected:
0 , < 24.Q1
(custom)
|
Date Public
2024-04-09 16:23
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-21972",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-04-23T20:24:56.540837Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-07-24T18:06:16.832Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2025-11-04T18:23:17.557Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6012.html"
},
{
"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1848"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "AMD Software: Adrenalin Edition ",
"vendor": "AMD",
"versions": [
{
"lessThan": "12.1.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "AMD Software: PRO Edition",
"vendor": "AMD",
"versions": [
{
"lessThan": "24.Q1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"datePublic": "2024-04-09T16:23:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\n\n\u003cspan style=\"background-color: rgb(248, 249, 250);\"\u003eAn out of bounds write vulnerability in the AMD Radeon\u2122 user mode driver for DirectX\u003c/span\u003e\u00ae\u003cspan style=\"background-color: rgb(248, 249, 250);\"\u003e\u0026nbsp;11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.\u003c/span\u003e\n\n"
}
],
"value": "\nAn out of bounds write vulnerability in the AMD Radeon\u2122 user mode driver for DirectX\u00ae\u00a011 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.\n\n"
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-04-23T16:36:03.933Z",
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
"shortName": "AMD"
},
"references": [
{
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6012.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
"assignerShortName": "AMD",
"cveId": "CVE-2024-21972",
"datePublished": "2024-04-23T16:36:03.933Z",
"dateReserved": "2024-01-03T16:43:30.196Z",
"dateUpdated": "2025-11-04T18:23:17.557Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}