Security Bulletin
This security bulletin contains information about 2 vulnerabilities.
EUVDB-ID: #VU88338
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2024-21972
CWE-ID:
CWE-787 - Out-of-bounds write
Exploit availability: No
Description The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within the user mode driver for DirectX 11. A local user can trigger an out-of-bounds write and execute arbitrary code on the target system.
MitigationInstall update from vendor's website.
Vulnerable software versionsAMD Radeon Graphic Driver for Windows 11 (Version 21H2 or later), 10 (Version 21H1 or later) - ThinkPad Z13 (Type 21D2, 21D3), Z16 (Type 21D4, 21D5): All versions
AMD Kit Driver for Windows 11 (Version 21H2 or later), 10 (Version 1803 or later) - ThinkPad T495s, X395: All versions
AMD Graphics Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad T14 Gen 2, T14s Gen 2, X13 Gen 2: All versions
AMD Kit Driver for Windows 11 (Version 21H2), 10 (Version 1809 or later) - ThinkPad T14 Gen 1, T14s Gen 1, X13 Gen 1: All versions
AMD Kit Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad E495, E595: All versions
AMD Graphics Driver for Windows 11 (Version 22H2 or later), 10 64-bit (Version 22H2 or later) - ThinkPad E14 Gen 5 (Type 21JR, 21JS), E16 Gen 1 (Type 21JT, 21JU): All versions
AMD Video Driver for Windows 11 (Version 21H2 or later), 10 64-bit (Version 21H2 or later) - ThinkPad E14 Gen 4, E15 Gen 4: All versions
AMD Video Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad E14 Gen 3, E15 Gen 3: All versions
AMD Video Driver for Windows 11 (Version 21H2 or later), 10 (Version 1909 or Later) - ThinkPad E14 Gen 2, E15 Gen 2: All versions
Thinkpad E16 Gen 1 21JU: All versions
Thinkpad E16 Gen 1 21JT: All versions
ThinkPad E15 Gen 4 21EE: All versions
ThinkPad E15 Gen 4 21ED: All versions
ThinkPad E14 Gen 5 21JS: All versions
ThinkPad E14 Gen 5 21JR: All versions
ThinkPad E14 Gen 4 21EC: All versions
ThinkPad E14 Gen 4 21EB: All versions
Lenovo K14 21CU: All versions
Lenovo K14 21CV: All versions
ThinkStation P8 Workstation: All versions
ThinkStation P358 Workstation: All versions
Lenovo 13w Yoga 82S2: All versions
Lenovo 13w Yoga 82S1: All versions
Legion T5 26ARA8: All versions
ThinkStation P620 Workstation: All versions
ThinkPad X395: All versions
ThinkPad X13 20UG: All versions
ThinkPad X13 20UF: All versions
ThinkPad T495s 20QK: All versions
ThinkPad T495s 20QJ: All versions
ThinkPad T14s 20UJ: All versions
ThinkPad T14s 20UH: All versions
ThinkPad T14 Gen 1 20UE: All versions
ThinkPad T14 Gen 1 20UD: All versions
ThinkPad L15 20U8: All versions
ThinkPad L15 20U7: All versions
ThinkPad L14 20U6: All versions
ThinkPad L14 20U5: All versions
ThinkPad E595 20NF: All versions
ThinkPad E495 20NE: All versions
ThinkPad E15 Gen 3: All versions
ThinkPad E15 Gen 2 20T9: All versions
ThinkPad E15 Gen 2 20T8: All versions
ThinkPad E14 Gen 3: All versions
ThinkPad E14 Gen 2 20T7: All versions
ThinkPad E14 Gen 2 20T6: All versions
ThinkPad X13 Gen 2 20XJ: All versions
ThinkPad X13 Gen 2 20XH: All versions
ThinkPad T14s Gen 2 20XG: All versions
ThinkPad T14s Gen 2 20XF: All versions
ThinkPad T14 Gen 2 20XL: All versions
ThinkPad T14 Gen 2 20XK: All versions
ThinkPad L15 Gen 2 20X8: All versions
ThinkPad L15 Gen 2 20X7: All versions
ThinkPad L14 Gen 2 20X6: All versions
ThinkPad L14 Gen 2 20X5: All versions
ThinkStation P360 Ultra Workstation: All versions
ThinkCentre Neo 50t Gen 4: All versions
LOQ 17IRB8: All versions
ThinkCentre Neo 50t Gen 3: All versions
ThinkStation P7 Intel Workstation: All versions
ThinkStation P5 Workstation: All versions
ThinkStation P520c Workstation: All versions
ThinkStation P360 Workstation: All versions
ThinkStation P350 Workstation: All versions
ThinkStation P348 Workstation: All versions
ThinkStation P3 Tower Workstation: All versions
ThinkCentre M90t Gen 4: All versions
ThinkCentre M90t Gen 3: All versions
ThinkCentre M90s Gen 4: All versions
ThinkCentre M90s Gen 3: All versions
ThinkCentre M80t Gen 3: All versions
ThinkCentre M80s Gen 3: All versions
ThinkCentre M70t Gen 4: All versions
ThinkCentre M70t Gen 3: All versions
ThinkCentre M70s Gen 4: All versions
ThinkCentre M70s Gen 3: All versions
ThinkPad Z16 Gen 1 21D5: All versions
ThinkPad Z16 Gen 1 21D4: All versions
ThinkPad Z13 Gen 1 21D3: All versions
ThinkPad Z13 Gen 1 21D2: All versions
ThinkStation P340 Workstation: All versions
AMD Graphics Driver for Windows 11 (Version 24H2) and 10 (Version 22H2) - ThinkStation P8: before 31.0.24026.3002
AMD Discrete Graphics Driver for Windows 10 (Version 21H2), 11 (Version 21H2, 22H2) - ThinkStation P7 Intel: before 32.0.11002.41
AMD Discrete VGA Driver for Windows 11 (Version 22H2) - ThinkStation P620: before 31.0.24026.3002
AMD Discrete Graphics Driver for RX7600 for Windows 10 (Version 22H2) - ThinkStation P520c: before 32.0.11012.3002
AMD Discrete Graphics Driver for Windows 10 (Version 21H2), 11 (Version 21H2, 22H2) - ThinkStation P5: before 32.0.11002.41
AMD Discrete Graphics Driver for Windows 11 (Version 21H2 or Later) - ThinkStation P360: before 32.0.11020.14002
AMD Discrete Graphics Driver for Windows 10 (Version 22H2) - ThinkStation P360: before 32.0.11020.14002
AMD Discrete Graphics Driver (Radeon W6400) for Windows 10 (Version 20H2, 21H1, 21H2) - ThinkStation P360: before 32.0.11020.14002
AMD Discrete Graphics Driver for W6400 for Windows 10 (Version 21H2, 22H2 or Later) - ThinkStation P360 Ultra: before 31.0.24026.3002 FOR W6400 AND 31.0.21912.14 FOR WX3200
AMD Discrete Graphics Driver for Windows 11 (Version 22H2 or Later), 10 (Version 22H2) - ThinkStation P358: before 31.0.24026.3002
AMD Discrete VGA Driver for Windows 10 64-bit (Version 20H2) - ThinkStation P350: before 31.0.21916.4001
AMD Discrete Graphics Driver for Radeon WX3200 for Windows 10 (Version 21H1 or later), 11 (Version 21H2 or Later) - ThinkStation P350: before 31.0.21916.4001
AMD Discrete VGA Driver for Windows 10 64-bit (Version 20H2) - ThinkStation P348: before 32.0.11020.14002
AMD Discrete Graphics Driver for Windows 11 (Version 21H2) - ThinkStation P348: before 32.0.11020.14002
AMD Discrete Graphics Driver for Radeon WX3200 for Windows 10 (Version 21H2 or later), 11 (Version 22H2 or later) - ThinkStation P348: before 32.0.11020.14002
AMD Discrete Graphics Driver (Radeon W6400) for Windows 10 (Version 21H2), 11 (Version 21H2) - ThinkStation P348: before 32.0.11020.14002
AMD Discrete VGA Driver for Windows 10 64-bit (Version 20H2) - ThinkStation P340: before 31.0.21916.4001
AMD Discrete VGA Driver for Windows 10 64-bit (Version 2004) - ThinkStation P340: before 31.0.21916.4001
AMD Discrete Graphics Driver for Radeon WX3200 for Windows 11 (Version 21H2 or Later) - ThinkStation P340: before 31.0.21916.4001
AMD Discrete Graphics Driver for Radeon WX3200 for Windows 10 (Version 21H2 or Later) - ThinkStation P340: before 31.0.21916.4001
AMD Discrete Graphics Driver for Windows 10 (Version 21H2, 22H2), 11 (Version 21H2, 22H2, 23H2) - ThinkStation P3: before 32.0.11020.14002
AMD Video Driver for Windows 11 (Version 21H2 or later), 10 (Version 1909 or later) - ThinkPad L14 Gen 2, L15 Gen 2: before R1KAV25W
AMD Video Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad L14 Gen 1 (type 20U5, 20U6), L15 Gen 1 (type 20U7, 20U8): before R19AV26W
AMD Video Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - Lenovo K14 Gen 1 (Type 21CU, 21CV): before R1WAV10W
AMD Graphics Driver for Windows 10 64-bit (Version 21H2 or later) - Lenovo 13w Yoga (Type 82S1, 82S2): before 31.0.21910.5
AMD Discrete VGA Driver for Windows 10 (64-bit) - ThinkCentre Neo 50t Gen 4: before 31.0.12018.14002
AMD Discrete Graphics Driver for Windows 11 (Version 21H2 or Later) - ThinkCentre Neo 50t Gen 4: before 32.0.11012.5002
AMD Discrete Graphics Driver for Windows 11 (Version 21H2 or later) - ThinkCentre Neo 50t Gen 3: before 32.0.11012.5002
AMD Discrete Graphics Driver for Windows 10 (64-bit) - ThinkCentre Neo 50t Gen 3: before 32.0.11012.5002
AMD Discrete VGA Driver for Windows 10 (64-bit) - ThinkCentre M90t Gen 4, M90s Gen 4: before 31.0.12018.14002
AMD Discrete Graphics Driver for Windows 10 (64-bit) - ThinkCentre M90s Gen 3, M90t Gen 3: before 32.0.11012.5002
AMD Discrete Graphics Driver for Windows 10 (64-bit) - ThinkCentre M80s Gen 3, M80t Gen 3: before 32.0.11012.5002
AMD Discrete VGA Driver for Windows 10 IOT - ThinkCentre: before 31.0.12018.14002
AMD Discrete VGA Driver for Windows 10 64-bit - ThinkCentre M70t Gen 4, M70s Gen 4: before 31.0.12018.14002
AMD Discrete VGA Driver for Windows 10 IOT - ThinkCentre M70s Gen 3, M70t Gen 3: before 30.0.14030.4003
AMD Discrete Graphics Driver for RX7600 for Windows 11 64-bit (Version 21H2 or Later) - LOQ 17IRB8: before 32.0.11012.5002
AMD Discrete Graphics Driver for RX6600LE for Windows 11 64-bit (Version 21H2 or Later) - LOQ 17IRB8: before 31.0.22011.10001
AMD Radeon RX 7600 Display Driver for Windows 11 64-bit (Version 21H2 or Later) - Legion T5 26ARA8: before 32.0.11012.3002
CPE2.3https://support.lenovo.com/us/en/product_security/LEN-158418
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU88341
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2024-21979
CWE-ID:
CWE-787 - Out-of-bounds write
Exploit availability: No
Description The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within the AMD Radeon DirectX 11 driver. A local user can trigger an out-of-bounds write and execute arbitrary code on the target system.
MitigationInstall update from vendor's website.
Vulnerable software versionsAMD Radeon Graphic Driver for Windows 11 (Version 21H2 or later), 10 (Version 21H1 or later) - ThinkPad Z13 (Type 21D2, 21D3), Z16 (Type 21D4, 21D5): All versions
AMD Kit Driver for Windows 11 (Version 21H2 or later), 10 (Version 1803 or later) - ThinkPad T495s, X395: All versions
AMD Graphics Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad T14 Gen 2, T14s Gen 2, X13 Gen 2: All versions
AMD Kit Driver for Windows 11 (Version 21H2), 10 (Version 1809 or later) - ThinkPad T14 Gen 1, T14s Gen 1, X13 Gen 1: All versions
AMD Kit Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad E495, E595: All versions
AMD Graphics Driver for Windows 11 (Version 22H2 or later), 10 64-bit (Version 22H2 or later) - ThinkPad E14 Gen 5 (Type 21JR, 21JS), E16 Gen 1 (Type 21JT, 21JU): All versions
AMD Video Driver for Windows 11 (Version 21H2 or later), 10 64-bit (Version 21H2 or later) - ThinkPad E14 Gen 4, E15 Gen 4: All versions
AMD Video Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad E14 Gen 3, E15 Gen 3: All versions
AMD Video Driver for Windows 11 (Version 21H2 or later), 10 (Version 1909 or Later) - ThinkPad E14 Gen 2, E15 Gen 2: All versions
Thinkpad E16 Gen 1 21JU: All versions
Thinkpad E16 Gen 1 21JT: All versions
ThinkPad E15 Gen 4 21EE: All versions
ThinkPad E15 Gen 4 21ED: All versions
ThinkPad E14 Gen 5 21JS: All versions
ThinkPad E14 Gen 5 21JR: All versions
ThinkPad E14 Gen 4 21EC: All versions
ThinkPad E14 Gen 4 21EB: All versions
Lenovo K14 21CU: All versions
Lenovo K14 21CV: All versions
ThinkStation P8 Workstation: All versions
ThinkStation P358 Workstation: All versions
Lenovo 13w Yoga 82S2: All versions
Lenovo 13w Yoga 82S1: All versions
Legion T5 26ARA8: All versions
ThinkStation P620 Workstation: All versions
ThinkPad X395: All versions
ThinkPad X13 20UG: All versions
ThinkPad X13 20UF: All versions
ThinkPad T495s 20QK: All versions
ThinkPad T495s 20QJ: All versions
ThinkPad T14s 20UJ: All versions
ThinkPad T14s 20UH: All versions
ThinkPad T14 Gen 1 20UE: All versions
ThinkPad T14 Gen 1 20UD: All versions
ThinkPad L15 20U8: All versions
ThinkPad L15 20U7: All versions
ThinkPad L14 20U6: All versions
ThinkPad L14 20U5: All versions
ThinkPad E595 20NF: All versions
ThinkPad E495 20NE: All versions
ThinkPad E15 Gen 3: All versions
ThinkPad E15 Gen 2 20T9: All versions
ThinkPad E15 Gen 2 20T8: All versions
ThinkPad E14 Gen 3: All versions
ThinkPad E14 Gen 2 20T7: All versions
ThinkPad E14 Gen 2 20T6: All versions
ThinkPad X13 Gen 2 20XJ: All versions
ThinkPad X13 Gen 2 20XH: All versions
ThinkPad T14s Gen 2 20XG: All versions
ThinkPad T14s Gen 2 20XF: All versions
ThinkPad T14 Gen 2 20XL: All versions
ThinkPad T14 Gen 2 20XK: All versions
ThinkPad L15 Gen 2 20X8: All versions
ThinkPad L15 Gen 2 20X7: All versions
ThinkPad L14 Gen 2 20X6: All versions
ThinkPad L14 Gen 2 20X5: All versions
ThinkStation P360 Ultra Workstation: All versions
ThinkCentre Neo 50t Gen 4: All versions
LOQ 17IRB8: All versions
ThinkCentre Neo 50t Gen 3: All versions
ThinkStation P7 Intel Workstation: All versions
ThinkStation P5 Workstation: All versions
ThinkStation P520c Workstation: All versions
ThinkStation P360 Workstation: All versions
ThinkStation P350 Workstation: All versions
ThinkStation P348 Workstation: All versions
ThinkStation P3 Tower Workstation: All versions
ThinkCentre M90t Gen 4: All versions
ThinkCentre M90t Gen 3: All versions
ThinkCentre M90s Gen 4: All versions
ThinkCentre M90s Gen 3: All versions
ThinkCentre M80t Gen 3: All versions
ThinkCentre M80s Gen 3: All versions
ThinkCentre M70t Gen 4: All versions
ThinkCentre M70t Gen 3: All versions
ThinkCentre M70s Gen 4: All versions
ThinkCentre M70s Gen 3: All versions
ThinkPad Z16 Gen 1 21D5: All versions
ThinkPad Z16 Gen 1 21D4: All versions
ThinkPad Z13 Gen 1 21D3: All versions
ThinkPad Z13 Gen 1 21D2: All versions
ThinkStation P340 Workstation: All versions
AMD Graphics Driver for Windows 11 (Version 24H2) and 10 (Version 22H2) - ThinkStation P8: before 31.0.24026.3002
AMD Discrete Graphics Driver for Windows 10 (Version 21H2), 11 (Version 21H2, 22H2) - ThinkStation P7 Intel: before 32.0.11002.41
AMD Discrete VGA Driver for Windows 11 (Version 22H2) - ThinkStation P620: before 31.0.24026.3002
AMD Discrete Graphics Driver for RX7600 for Windows 10 (Version 22H2) - ThinkStation P520c: before 32.0.11012.3002
AMD Discrete Graphics Driver for Windows 10 (Version 21H2), 11 (Version 21H2, 22H2) - ThinkStation P5: before 32.0.11002.41
AMD Discrete Graphics Driver for Windows 11 (Version 21H2 or Later) - ThinkStation P360: before 32.0.11020.14002
AMD Discrete Graphics Driver for Windows 10 (Version 22H2) - ThinkStation P360: before 32.0.11020.14002
AMD Discrete Graphics Driver (Radeon W6400) for Windows 10 (Version 20H2, 21H1, 21H2) - ThinkStation P360: before 32.0.11020.14002
AMD Discrete Graphics Driver for W6400 for Windows 10 (Version 21H2, 22H2 or Later) - ThinkStation P360 Ultra: before 31.0.24026.3002 FOR W6400 AND 31.0.21912.14 FOR WX3200
AMD Discrete Graphics Driver for Windows 11 (Version 22H2 or Later), 10 (Version 22H2) - ThinkStation P358: before 31.0.24026.3002
AMD Discrete VGA Driver for Windows 10 64-bit (Version 20H2) - ThinkStation P350: before 31.0.21916.4001
AMD Discrete Graphics Driver for Radeon WX3200 for Windows 10 (Version 21H1 or later), 11 (Version 21H2 or Later) - ThinkStation P350: before 31.0.21916.4001
AMD Discrete VGA Driver for Windows 10 64-bit (Version 20H2) - ThinkStation P348: before 32.0.11020.14002
AMD Discrete Graphics Driver for Windows 11 (Version 21H2) - ThinkStation P348: before 32.0.11020.14002
AMD Discrete Graphics Driver for Radeon WX3200 for Windows 10 (Version 21H2 or later), 11 (Version 22H2 or later) - ThinkStation P348: before 32.0.11020.14002
AMD Discrete Graphics Driver (Radeon W6400) for Windows 10 (Version 21H2), 11 (Version 21H2) - ThinkStation P348: before 32.0.11020.14002
AMD Discrete VGA Driver for Windows 10 64-bit (Version 20H2) - ThinkStation P340: before 31.0.21916.4001
AMD Discrete VGA Driver for Windows 10 64-bit (Version 2004) - ThinkStation P340: before 31.0.21916.4001
AMD Discrete Graphics Driver for Radeon WX3200 for Windows 11 (Version 21H2 or Later) - ThinkStation P340: before 31.0.21916.4001
AMD Discrete Graphics Driver for Radeon WX3200 for Windows 10 (Version 21H2 or Later) - ThinkStation P340: before 31.0.21916.4001
AMD Discrete Graphics Driver for Windows 10 (Version 21H2, 22H2), 11 (Version 21H2, 22H2, 23H2) - ThinkStation P3: before 32.0.11020.14002
AMD Video Driver for Windows 11 (Version 21H2 or later), 10 (Version 1909 or later) - ThinkPad L14 Gen 2, L15 Gen 2: before R1KAV25W
AMD Video Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad L14 Gen 1 (type 20U5, 20U6), L15 Gen 1 (type 20U7, 20U8): before R19AV26W
AMD Video Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - Lenovo K14 Gen 1 (Type 21CU, 21CV): before R1WAV10W
AMD Graphics Driver for Windows 10 64-bit (Version 21H2 or later) - Lenovo 13w Yoga (Type 82S1, 82S2): before 31.0.21910.5
AMD Discrete VGA Driver for Windows 10 (64-bit) - ThinkCentre Neo 50t Gen 4: before 31.0.12018.14002
AMD Discrete Graphics Driver for Windows 11 (Version 21H2 or Later) - ThinkCentre Neo 50t Gen 4: before 32.0.11012.5002
AMD Discrete Graphics Driver for Windows 11 (Version 21H2 or later) - ThinkCentre Neo 50t Gen 3: before 32.0.11012.5002
AMD Discrete Graphics Driver for Windows 10 (64-bit) - ThinkCentre Neo 50t Gen 3: before 32.0.11012.5002
AMD Discrete VGA Driver for Windows 10 (64-bit) - ThinkCentre M90t Gen 4, M90s Gen 4: before 31.0.12018.14002
AMD Discrete Graphics Driver for Windows 10 (64-bit) - ThinkCentre M90s Gen 3, M90t Gen 3: before 32.0.11012.5002
AMD Discrete Graphics Driver for Windows 10 (64-bit) - ThinkCentre M80s Gen 3, M80t Gen 3: before 32.0.11012.5002
AMD Discrete VGA Driver for Windows 10 IOT - ThinkCentre: before 31.0.12018.14002
AMD Discrete VGA Driver for Windows 10 64-bit - ThinkCentre M70t Gen 4, M70s Gen 4: before 31.0.12018.14002
AMD Discrete VGA Driver for Windows 10 IOT - ThinkCentre M70s Gen 3, M70t Gen 3: before 30.0.14030.4003
AMD Discrete Graphics Driver for RX7600 for Windows 11 64-bit (Version 21H2 or Later) - LOQ 17IRB8: before 32.0.11012.5002
AMD Discrete Graphics Driver for RX6600LE for Windows 11 64-bit (Version 21H2 or Later) - LOQ 17IRB8: before 31.0.22011.10001
AMD Radeon RX 7600 Display Driver for Windows 11 64-bit (Version 21H2 or Later) - Legion T5 26ARA8: before 32.0.11012.3002
CPE2.3https://support.lenovo.com/us/en/product_security/LEN-158418
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.