CVE-2024-21962
Full vulnerability record from the local CVENow database.
Description
Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution.
Severity
HIGH
CVSS score
8.6
(v4.0)
Vulnerability status
Awaiting Analysis
Source identifier
Published
2026-05-15 03:16:20.803000
Last modified
2026-10-27 18:10:00.130000
View original CVE JSON
{
"id": "CVE-2024-21962",
"sourceIdentifier": "[email protected]",
"published": "2026-05-15T03:16:20.803",
"lastModified": "2026-10-27T18:10:00.130",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution."
},
{
"lang": "es",
"value": "Validación de entrada incorrecta en el controlador AMD RAID podría permitir a un atacante apuntar a una ubicación de memoria arbitraria resultando potencialmente en escalada de privilegios y ejecución de código arbitrario."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "AMD",
"product": "AMD EPYC™ 4005 Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "AMD RAID Software: 9.3.3.245",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD EPYC™ 4004 Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "AMD RAID Software: 9.3.3.245",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "AMD RAID Software: 9.3.3.245",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics",
"defaultStatus": "affected",
"versions": [
{
"version": "No fix planned",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Threadripper™ 7000 WX-Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "AMD RAID Software: 9.3.3.245",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 9000HX Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "AMD RAID Software: 9.3.3.245",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "AMD RAID Software: 9.3.3.245",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 3000 Series Desktop Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "No fix planned",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics",
"defaultStatus": "affected",
"versions": [
{
"version": "No fix planned",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics",
"defaultStatus": "affected",
"versions": [
{
"version": "No fix planned",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 5000 Series Desktop Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "No fix planned",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics",
"defaultStatus": "affected",
"versions": [
{
"version": "AMD RAID Software: 9.3.3.245",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics",
"defaultStatus": "affected",
"versions": [
{
"version": "AMD RAID Software: 9.3.3.245",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Z2 Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "AMD RAID Software: 9.3.3.245",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics",
"defaultStatus": "affected",
"versions": [
{
"version": "No fix planned",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics",
"defaultStatus": "affected",
"versions": [
{
"version": "No fix planned",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics",
"defaultStatus": "affected",
"versions": [
{
"version": "No fix planned",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ AI 300 Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "AMD RAID Software: 9.3.3.245",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics",
"defaultStatus": "affected",
"versions": [
{
"version": "No fix planned",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics",
"defaultStatus": "affected",
"versions": [
{
"version": "AMD RAID Software: 9.3.3.245",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ AI Max 300 Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "AMD RAID Software: 9.3.3.245",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Threadripper™ 9000 Series",
"defaultStatus": "affected",
"versions": [
{
"version": "AMD RAID Software: 9.3.3.245",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 2000 Mobile Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "No fix planned",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 4000 Series Desktop Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "No fix planned",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 7000 Series Desktop Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "AMD RAID Software: 9.3.3.245",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 8000 Series Desktop Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "AMD RAID Software: 9.3.3.245",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 9000 Series Desktop Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "AMD RAID Software: 9.3.3.245",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD EPYC™ Embedded 4005 Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "Embedded EPYC_4005 Windows RAID Driver - 9.3.3.00245 - (71794)",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-05-15T00:00:00+00:00",
"id": "CVE-2024-21962",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1220"
}
]
}
],
"references": [
{
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4016.html",
"source": "[email protected]"
}
]
}