Vulnerability in Amd Athlon™ 3000 Series Desktop Processors With Radeon™ Graphics
CVE-2024-21971
Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading to denial of service.
EPSS: 0.000 (15.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Amd Athlon™ 3000 Series Desktop Processors With Radeon™ Graphics — versions AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01), AMD Software: PRO Edition 24.Q2 (23.19.16.01)
- Amd Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics — versions AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01), AMD Software: PRO Edition 24.Q2 (23.19.16.01)
- Amd Radeon™ Instinct™ Mi25 — versions Contact your AMD Customer Engineering representative
- Amd Radeon™ Pro V520 — versions Contact your AMD Customer Engineering representative
- Amd Radeon™ Pro V620 — versions Contact your AMD Customer Engineering representative
- Amd Radeon™ Pro V710 — versions Contact your AMD Customer Engineering representative
- Amd Radeon™ Pro Vii — versions AMD Software: Adrenalin Edition 24.7.1 (23.19.16), AMD Software: PRO Edition 24.Q2 (23.19.16.01)
- Amd Radeon™ Pro W5000 Series Graphics Products — versions AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01), AMD Software: PRO Edition 24.Q2 (23.19.16.01)
- Amd Radeon™ Pro W7000 Series Graphics Products — versions AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01), AMD Software: PRO Edition 24.Q2 (23.19.16.01)
- Amd Radeon™ Rx 5000 Series Graphics Products — versions AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01), AMD Software: PRO Edition 24.Q2 (23.19.16.01)
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-21971?
- CVE-2024-21971 is a medium-severity vulnerability in Amd Athlon™ 3000 Series Desktop Processors With Radeon™ Graphics, classified under CWE-1220. CVSS score: 5.5/10. Published 2025-02-12.
- How severe is CVE-2024-21971?
- Medium severity. CVSS v3 base score is 5.5 out of 10.