CVE-2024-21975: AMD Ryzen Ai Software

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution.

Affected products

• AMD Ryzen Ai Software: before 1.2 (fixed in 1.2)

Published 2024-11-12. Last modified 2026-06-17.