CVE-2024-49969 drm/amd/display: Fix index out of bounds in DCN30 color transformation

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Address Memory Corruption in AMD Display Drivers Two vulnerabilities affecting AMD display drivers have been reported. CVE-2024-26913, published on April 17, 2024, addresses an underflow/corruption issue, while CVE-2024-56784, published on January 8, 2025, introduces an array index check to prevent memory corruption. Both vulnerabilities could impact systems utilizing affected AMD display drivers. 13 sources 54