CVE-2024-21971

Summary

CVE-2024-21971 is a newly disclosed vulnerability affecting AMD Crash Defender. This issue arises due to improper input validation, which enables an attacker to supply an unauthorized Windows system process ID to a kernel-mode driver. Consequently, the operating system may crash, leading to potential denial of service (DoS) attacks. To mitigate this risk, affected users are advised to apply the forthcoming patch from AMD as soon as it becomes available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.