CVE-2024-21972

medium

Description

An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.

References

https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1848

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6012.html

Details

Source: Mitre, NVD

Published: 2024-04-23

Updated: 2025-11-04

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:L/AC:L/Au:S/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L