AMD Software: Pro Edition vulnerabilities

2 CVEs affecting AMD Software: Pro Edition, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-21979, published 2024-04-23.

More from AMD.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-21979, published 2024-04-23. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.
• CVE-2024-21972, published 2024-04-23. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.