Description
Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading to denial of service.
Scores
CVSS v3
5.5
EPSS
0.0005
EPSS Percentile
15.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-1220
Status
published
Products (50)
AMD/AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
AMD/AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
AMD Software: PRO Edition 24.Q2 (23.19.16.01)
AMD/AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
AMD/AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
AMD Software: PRO Edition 24.Q2 (23.19.16.01)
AMD/AMD Radeon™ Instinct™ MI25
Contact your AMD Customer Engineering representative
AMD/AMD Radeon™ PRO V520
Contact your AMD Customer Engineering representative
AMD/AMD Radeon™ PRO V620
Contact your AMD Customer Engineering representative
AMD/AMD Radeon™ PRO V710
Contact your AMD Customer Engineering representative
AMD/AMD Radeon™ PRO VII
AMD Software: Adrenalin Edition 24.7.1 (23.19.16)
AMD/AMD Radeon™ PRO VII
AMD Software: PRO Edition 24.Q2 (23.19.16.01)
... and 40 more
Published
Feb 12, 2025
Tracked Since
Feb 18, 2026