CVE-2024-33037

Summary

CVE-2024-33037 is a newly identified information disclosure vulnerability. Affected systems include those with an NPU (Neural Processing Unit) firmware that can send invalid IPC (Inter-Process Communication) messages to the NPU driver. The NPU driver fails to validate these messages, resulting in the disclosure of sensitive information to an attacker. Successful exploitation of this vulnerability could lead to unauthorized access to system data or potentially enable more serious attacks. It is recommended that affected organizations apply the necessary patches or updates to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.