medium
advisory
AMD IOMMU: Out-of-bounds device table read (CVE-2024-21963)
AMD has disclosed a vulnerability in certain IOMMUs where the hardware performs out-of-bounds reads from the Device Table beyond the size chosen by the OS or Hypervisor.
CVE search metadata
CVE search record: CVE-2024-21963. KEV: no. Product: IOMMU. Brief: AMD IOMMU: Out-of-bounds device table read (CVE-2024-21963). Brief link: https://feed.craftedsignal.io/briefs/2026-11-xen-amd-iommu/
Triage facts
Revision 1- Applicability
- IOMMU
- Evidence
- Not observed
- Severity
- Medium
- Sources
- 2 public sources
- Freshness
- Revision 1Nov 11, 00:38 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A1Unknown
AMD has disclosed a vulnerability (CVE-2024-21963 / XSA-524) in some IOMMUs. Under specific circumstances, the hardware reads beyond the size chosen by the OS or Hypervisor for the Device Table, which holds the configuration information for devices.