CVE-2024-21971: amd amd athlon™ 3000 series desktop processors with radeon™ graphics

Vulnerability summary

CVE-2024-21971 is a medium (CVSS 5.5) vulnerability in amd amd athlon™ 3000 series desktop processors with radeon™ graphics. EPSS estimates a 0.13% chance of exploitation in the next 30 days, higher than 2.5% of scored vulnerabilities.

Timeline

1. 12-02-2025
   PublishedVulnerability first disclosed.
2. 23-09-2025
   Last modifiedVulnerability information updated.

Description

Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading to denial of service.

• CWE-1220Insufficient Granularity of Access ControlThe product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad because it allows accesses from unauthorized agents to the security-sensitive assets.