VULNERABILITY INTELLIGENCE
CVE-2024-36337
CVSS score7.9 HIGH
EPSS probability0.16%
CISA KEVNot currently listed
Published2025-04-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
Description
Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of confidentiality, integrity or availability.
Weakness classification
- psirt@amd.com: CWE-190