rainbutterfly/cve_corpus huggingface dataset:
CVE-2024-36304 
A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected products: vendor: Trend Micro, Inc.
product: Trend Micro Apex One
vendor: Trend Micro, Inc.
product: Trend Micro Apex One as a Service
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: 2024-06-10T21:21:04.492Z
CVE-2024-36305 
A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected products: vendor: Trend Micro, Inc.
product: Trend Micro Apex One
vendor: Trend Micro, Inc.
product: Trend Micro Apex One as a Service
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: 2024-06-10T21:21:14.678Z
CVE-2024-36306 
A link following vulnerability in the Trend Micro Apex One and Apex One as a Service Damage Cleanup Engine could allow a local attacker to create a denial-of-service condition on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected products: vendor: Trend Micro, Inc.
product: Trend Micro Apex One
vendor: Trend Micro, Inc.
product: Trend Micro Apex One as a Service
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: HIGH
baseSeverity: MEDIUM
baseScore: 6.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Published: 2024-06-10T21:21:23.910Z
CVE-2024-36307 
A security agent link following vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information about the agent on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected products: vendor: Trend Micro, Inc.
product: Trend Micro Apex One
vendor: Trend Micro, Inc.
product: Trend Micro Apex One as a Service
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
baseSeverity: MEDIUM
baseScore: 4.7
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Published: 2024-06-10T21:21:32.953Z
CVE-2024-36310 
Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SMRAM potentially resulting in loss of confidentiality or integrity.
Problem types: cwe_id: CWE-124
description: CWE-124  Buffer Underwrite ('Buffer Underflow')
Affected products: vendor: AMD
product: AMD EPYC™ 9004 Series Processors
default_status: affected
vendor: AMD
product: AMD EPYC™ 9005 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 9000HX Series Mobile Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ AI Max 300 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ AI 300 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Threadripper™ 7000 Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 8000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 9000 Series Desktop Processors
default_status: affected
vendor: AMD
product: Not public
default_status: affected
vendor: AMD
product: AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 8000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V3000 Series Processors
default_status: affected
Published: 2026-02-10T19:24:21.681Z
CVE-2024-36311 
A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow a privileged attacker to bypass input validation and perform an out of bounds read or write, potentially resulting in loss of confidentiality, integrity, or availability.
Problem types: cwe_id: CWE-367
description: CWE-367  Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products: vendor: AMD
product: AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 9000HX Series Mobile Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 8000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 9000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 7000 Series Processors
default_status: affected
Published: 2026-02-10T19:50:06.871Z
CVE-2024-36315 
Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality.
Problem types: cwe_id: CWE-693
description: CWE-693  Protection Mechanism Failure
Affected products: vendor: AMD
product: AMD EPYC™ Series 9004 Processors
default_status: affected
vendor: AMD
product: AMD EPYC™Series 4004 Processors
default_status: affected
vendor: AMD
product: AMD EPYC™ 8004 Series Processors
default_status: affected
vendor: AMD
product: AMD Instinct™ MI300A Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Z1 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 9000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 8000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael")
default_status: affected
vendor: AMD
product: AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix")
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 8004 Series Processors
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo")
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 8000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 7000 Series Processors
default_status: affected
Published: 2026-05-13T03:07:34.076Z
CVE-2024-36316 
The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially resulting in a denial of service
Problem types: cwe_id: CWE-190
description: CWE-190  Integer Overflow or Wraparound
Affected products: vendor: AMD
product: AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics;
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7000 Series Desktop Processors;
AMD Ryzen™ 8000 Series Desktop Processors;
AMD Ryzen™ 9000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 9000HX Series Mobile Processors (formerly codenamed "Fire Range")
default_status: affected
vendor: AMD
product: AMD Ryzen™ Al Max+
default_status: affected
vendor: AMD
product: AMD Ryzen™ AI 300 Series Processors (formerly codenamed "Strix Point")
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 8000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 7000 Series Processors
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 7000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W7000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V520
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V620
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V710
default_status: affected
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
baseScore: 5.5
baseSeverity: MEDIUM
Credits: lang: en
value: Reported through AMD Bug Bounty Program
Published: 2026-02-11T14:27:25.373Z
CVE-2024-36319 
Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potentially impacting confidentiality, integrity and availabilability of the system.
Problem types: cwe_id: CWE-1191
description: CWE-1191  On-Chip Debug and Test Interface With Improper Access Control
Affected products: vendor: AMD
product: AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics;
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ AI MAX Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ AI 300 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 8000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 8000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 7000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 9000 Series Processors
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 7000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W7000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Instinct™ MI300X
default_status: affected
vendor: AMD
product: AMD Instinct™ MI300A
default_status: affected
vendor: AMD
product: AMD Instinct™ MI308X
default_status: affected
vendor: AMD
product: AMD Instinct™ MI325X
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V710
default_status: affected
Published: 2026-02-12T17:41:06.194Z
CVE-2024-36321 
Unquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution.
Problem types: cwe_id: CWE-428
description: CWE-428 Unquoted Search Path or Element
Affected products: vendor: AMD
product: AIM-T Manageability Service
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Published: 2025-05-13T17:05:09.839Z
CVE-2024-36323 
Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data.
Problem types: description: Security Vulnerability
Affected products: vendor: AMD
product: AMD Radeon™ RX 7000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W7000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Instinct™ MI308X
default_status: affected
vendor: AMD
product: AMD Instinct™ MI325X
default_status: affected
vendor: AMD
product: AMD Instinct™ MI300X
default_status: affected
vendor: AMD
product: AMD Instinct™ MI300A
default_status: affected
Published: 2026-05-15T02:59:08.150Z
CVE-2024-36324 
Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution.
Problem types: cwe_id: CWE-787
description: CWE-787  Out-of-bounds Write
Affected products: vendor: AMD
product: AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics;
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7000 Series Desktop Processors;
AMD Ryzen™ 8000 Series Desktop Processors;
AMD Ryzen™ 9000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 9000HX Series Mobile Processors (formerly codenamed "Fire Range")
default_status: affected
vendor: AMD
product: AMD Ryzen™ Al Max+
default_status: affected
vendor: AMD
product: AMD Ryzen™ AI 300 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 9000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 8000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 7000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 9000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 8000 Series Processors
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 5000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W5000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 7000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W7000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 9000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V520
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V620
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V710
default_status: affected
vendor: AMD
product: V620/NV21
default_status: affected
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
Credits: lang: en
value: Reported through AMD Bug Bounty Program
Published: 2026-02-11T14:29:47.274Z
CVE-2024-36326 
Missing authorization in AMD RomArmor could allow an attacker to bypass ROMArmor protections during system resume from a standby state, potentially resulting in a loss of confidentiality and integrity.
Problem types: cwe_id: CWE-862
description: CWE-862  Missing Authorization
Affected products: vendor: AMD
product: AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ AI 300 Series Processors
default_status: affected
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
baseScore: 8.4
baseSeverity: HIGH
Published: 2025-09-06T17:25:46.065Z
CVE-2024-36328 
Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of integrity or availability.
Problem types: cwe_id: CWE-190
description: CWE-190 Integer Overflow or Wraparound
Affected products: vendor: AMD
product: AMD Ryzen™ AI Software
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
version: 3.1
Published: 2025-04-02T16:18:15.926Z
CVE-2024-36331 
Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity.
Problem types: cwe_id: CWE-665
description: CWE-665  Improper Initialization
Affected products: vendor: AMD
product: AMD EPYC™ 9004 Series Processors
default_status: affected
vendor: AMD
product: EPYC™ Embedded 9004  Series Processors
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 9004 Series Processors
default_status: affected
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: NONE
baseScore: 3.2
baseSeverity: LOW
Published: 2025-09-06T17:29:38.215Z
CVE-2024-36332 
Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorized access to specific victim range of GPU MMIO register space, potentially causing the host OS to reboot and creating a Denial of Service (DOS) condition.
Problem types: cwe_id: CWE-1189
description: CWE-1189  Improper Isolation of Shared Resources on System-on-a-Chip (SoC)
Affected products: vendor: AMD
product: AMD Radeon™ PRO V710
default_status: affected
Published: 2026-05-15T02:51:02.752Z
CVE-2024-36333 
A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
Problem types: description: Security Vulnerability
Affected products: vendor: AMD
product: AMD Radeon™ RX 5000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W5000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 7000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Cleanup Utility
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W7000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ RX Vega Series Graphics Cards
default_status: affected
vendor: AMD
product: AMD Radeon™ VII
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO WX 8000/9000 Series Graphics Cards
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO VII
default_status: affected
Credits: lang: en
value: Reported through AMD Bug Bounty Program
Published: 2026-05-15T02:58:47.310Z
CVE-2024-36334 
Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to be run with elevated privileges potentially leading to arbitrary code execution.
Problem types: cwe_id: CWE-347
description: CWE-347  Improper Verification of Cryptographic Signature
Affected products: vendor: AMD
product: AMD Radeon™ RX 7000 Series Graphics Products
default_status: affected
Credits: lang: en
value: Reported through AMD Bug Bounty Program
Published: 2026-05-15T02:58:23.970Z
CVE-2024-36336 
Integer overflow within the AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to a loss of confidentiality, integrity, or availability.
Problem types: cwe_id: CWE-190
description: CWE-190 Integer Overflow or Wraparound
Affected products: vendor: AMD
product: AMD Ryzen™ AI Software
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.9
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
version: 3.1
Published: 2025-04-02T16:20:06.723Z
CVE-2024-36337 
Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of confidentiality, integrity or availability.
Problem types: cwe_id: CWE-190
description: CWE-190 Integer Overflow or Wraparound
Affected products: vendor: AMD
product: AMD Ryzen™ AI Software
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.9
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
version: 3.1
Published: 2025-04-02T16:16:30.895Z
CVE-2024-36339 
A DLL hijacking vulnerability in the AMD Optimizing CPU Libraries could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
Problem types: cwe_id: CWE-276
description: CWE-276 Incorrect Default Permissions
Affected products: vendor: AMD
product: AMD Optimizing CPU Libraries (AOCL)
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Published: 2025-05-13T16:56:41.523Z
CVE-2024-36340 
A  junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file deletion or disclosure.
Problem types: cwe_id: CWE-1386
description: CWE-1386 - Insecure Operation on Windows Junction / Mount Point
Affected products: vendor: AMD
product: AMD μProf
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 6.6
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
version: 3.1
Published: 2025-05-13T14:04:09.613Z