CVE-2024-21962
Description
Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution.
Is your site exposed to CVE-2024-21962?
Run a free security scan — no signup, results in seconds.
EPSS — Exploit Prediction
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
Weakness Type (CWE)
References
Frequently Asked Questions
What is CVE-2024-21962? +
How do I check if I'm vulnerable to CVE-2024-21962? +
Related Vulnerabilities
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application …
A vulnerability has been identified in the Now Platform that could result in data being inferred without authorization. Under certain …
AshLua exposes Ash read actions to Lua scripts run through an eval action. A read call accepts an operation (list, …
Ash field_policies are documented to protect against filter-based information disclosure: when a field the actor may not see is referenced …
AshAi exposes Ash read actions to language-model tool calls. The read tool accepts an aggregate result type (min, max, sum, …
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS …