CVE-2024-21971

Medium

Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver,…

AMD·CWE-1220·Published 2025-02-12

CVSS

5.5

EPSS

0.00

KEV

Exploits

cve.orgen

220 chars

Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading to denial of service.

NVDen

220 chars

NVDes

270 chars

Una validación de entrada incorrecta en AMD Crash Defender podría permitir que un atacante proporcione el ID del proceso de Windows® sistema a un controlador en modo kernel, lo que genera un bloqueo de sistema operativo, lo que puede llevar a una denegación de servicio.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.5	—	—	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	NVD	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H