Skip to content
Fencer Vulns
high 8.6

CVE-2024-21962 json

Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in…

published 2026-05-15 5 mo ago modified 2026-10-27 12 d ago also EUVD-2024-19568

cvss
8.6
version 4.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.1%
EPSS 0.1% chance of exploitation in 30 days, percentile 1%
public exploits
0
none known

Summary

Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution.

Patch / fix

  • AMD AMD EPYC™ 4005 Series Processors AMD RAID Software: 9.3.3.245
  • AMD AMD EPYC™ 4004 Series Processors AMD RAID Software: 9.3.3.245
  • AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors AMD RAID Software: 9.3.3.245
  • AMD AMD Ryzen™ Threadripper™ 7000 WX-Series Processors AMD RAID Software: 9.3.3.245
  • AMD AMD Ryzen™ 9000HX Series Processors AMD RAID Software: 9.3.3.245
  • AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors AMD RAID Software: 9.3.3.245
  • AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics AMD RAID Software: 9.3.3.245
  • AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics AMD RAID Software: 9.3.3.245
  • AMD AMD Ryzen™ Z2 Series Processors AMD RAID Software: 9.3.3.245
  • AMD AMD Ryzen™ AI 300 Series Processors AMD RAID Software: 9.3.3.245
  • AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics AMD RAID Software: 9.3.3.245
  • AMD AMD Ryzen™ AI Max 300 Series Processors AMD RAID Software: 9.3.3.245
  • AMD AMD Ryzen™ Threadripper™ 9000 Series AMD RAID Software: 9.3.3.245
  • AMD AMD Ryzen™ 7000 Series Desktop Processors AMD RAID Software: 9.3.3.245
  • AMD AMD Ryzen™ 8000 Series Desktop Processors AMD RAID Software: 9.3.3.245
  • AMD AMD Ryzen™ 9000 Series Desktop Processors AMD RAID Software: 9.3.3.245
  • AMD AMD EPYC™ Embedded 4005 Series Processors Embedded EPYC_4005 Windows RAID Driver - 9.3.3.00245 - (71794)

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
5 mo ago

Exploit prediction

0.11% chance of exploitation in the next 30 days, higher than 1% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 4.0 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CNA 4.0 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

  • AMD AMD EPYC™ 4005 Series Processors
  • AMD AMD EPYC™ 4004 Series Processors
  • AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
  • AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ Threadripper™ 7000 WX-Series Processors
  • AMD AMD Ryzen™ 9000HX Series Processors
  • AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
  • AMD AMD Ryzen™ 3000 Series Desktop Processors
  • AMD AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ 5000 Series Desktop Processors
  • AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ Z2 Series Processors
  • AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ AI 300 Series Processors
  • AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ AI Max 300 Series Processors
  • AMD AMD Ryzen™ Threadripper™ 9000 Series
  • AMD AMD Ryzen™ 2000 Mobile Processors
  • AMD AMD Ryzen™ 4000 Series Desktop Processors
  • AMD AMD Ryzen™ 7000 Series Desktop Processors
  • AMD AMD Ryzen™ 8000 Series Desktop Processors
  • AMD AMD Ryzen™ 9000 Series Desktop Processors
  • AMD AMD EPYC™ Embedded 4005 Series Processors

Classification

Weakness
  • CWE-1220 Insufficient Granularity of Access Control

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.