Vulnerabilites related to AMD - AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors
CVE-2024-21924 (GCVE-0-2024-21924)
Vulnerability from cvelistv5
Published
2025-02-11 20:18
Modified
2025-02-11 20:52
Severity ?
EPSS score ?
Summary
SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.
References
Impacted products
{ containers: { adp: [ { metrics: [ { other: { content: { id: "CVE-2024-21924", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2025-02-11T20:52:10.826130Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2025-02-11T20:52:32.535Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unknown", product: "AMD EPYC™ 7002 Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "Rome PI 1.0.0.K", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "ChagallWSPI-sWRX8 1.0.0.9", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "CastlePeakWSPI-sWRX8 1.0.0.E", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "ChagallWSPI-sWRX8 1.0.0.9", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "StormPeakPI-SP6 1.1.0.0h", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "StormPeakPI-SP6 1.0.0.1j", }, ], }, { defaultStatus: "unknown", product: "AMD EPYC™ Embedded 7002 Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "EmbRomePI-SP3 1.0.0.D", }, ], }, ], datePublic: "2025-02-11T17:00:00.000Z", descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.", }, ], value: "SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 8.2, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-250", description: "CWE-250 Execution with Unnecessary Privileges", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2025-02-11T20:18:50.402Z", orgId: "b58fc414-a1e4-4f92-9d70-1add41838648", shortName: "AMD", }, references: [ { url: "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7028.html", }, ], source: { discovery: "UNKNOWN", }, x_generator: { engine: "Vulnogram 0.2.0", }, }, }, cveMetadata: { assignerOrgId: "b58fc414-a1e4-4f92-9d70-1add41838648", assignerShortName: "AMD", cveId: "CVE-2024-21924", datePublished: "2025-02-11T20:18:50.402Z", dateReserved: "2024-01-03T16:43:09.232Z", dateUpdated: "2025-02-11T20:52:32.535Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
CVE-2024-21925 (GCVE-0-2024-21925)
Vulnerability from cvelistv5
Published
2025-02-11 20:39
Modified
2025-02-12 15:35
Severity ?
EPSS score ?
Summary
Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution.
References
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ▼ | AMD | AMD EPYC™ 7001 Processors | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{ containers: { adp: [ { metrics: [ { other: { content: { id: "CVE-2024-21925", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2025-02-11T21:01:07.683566Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2025-02-12T15:35:34.994Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unknown", product: "AMD EPYC™ 7001 Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "Naples PI 1.0.0.N", }, ], }, { defaultStatus: "unknown", product: "AMD EPYC™ 7002 Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "Rome PI 1.0.0.K", }, ], }, { defaultStatus: "unknown", product: "AMD EPYC™ 9004 Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "Genoa PI 1.0.0.D", }, ], }, { defaultStatus: "unknown", product: "AMD EPYC™ 7003 Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "Milan PI 1.0.0.E", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ 3000 Series Desktop Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "ComboAM4PI 1.0.0.C", }, { status: "unaffected", version: "ComboAM4v2PI 1.2.0.D", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ 5000 Series Desktop Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "ComboAM4v2PI 1.2.0.D", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "ComboAM4v2PI 1.2.0.D", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ 7000 Series Desktop Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "ComboAM5PI 1.2.0.2b", }, { status: "unaffected", version: "ComboAM5PI 1.1.0.3b", }, { status: "unaffected", version: "ComboAM5PI 1.0.0.a", }, ], }, { defaultStatus: "unknown", product: "AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "ComboAM4PI 1.0.0.C", }, { status: "unaffected", version: "ComboAM4v2PI 1.2.0.D", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "ComboAM4v2PI 1.2.0.D", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "ComboAM5PI 1.2.0.2b", }, { status: "unaffected", version: "ComboAM5PI 1.1.0.3b", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ Threadripper™ 3000 Series Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "CastlePeakPI-SP3r3 1.0.0.D", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "CastlePeakWSPI-sWRX8 1.0.0.F", }, { status: "unaffected", version: "ChagallWSPI-sWRX8 1.0.0.9", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "ChagallWSPI-sWRX8 1.0.0.9", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "StormPeakPI-SP6 1.1.0.0h", }, { status: "unaffected", version: "StormPeakPI-SP6 1.0.0.1j", }, ], }, { defaultStatus: "unknown", product: "AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "PicassoPI-FP5 1.0.1.2a", }, { status: "unaffected", version: "PollockPI-FT5 1.0.0.8a", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "PicassoPI-FP5 1.0.1.2a", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "RenoirPI-FP6 1.0.0.Ea", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "CezannePI-FP6 1.0.1.1a", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "MendocinoPI-FT6 1.0.0.7a", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "RembrandtPI-FP7 1.0.0.Ba", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "RembrandtPI-FP7 1.0.0.Ba", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "PhoenixPI-FP8-FP7 1.1.8.0", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "PhoenixPI-FP8-FP7 1.1.8.0", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ 7000 Series Mobile Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "DragonRangeFL1PI 1.0.0.3f", }, ], }, { defaultStatus: "unknown", product: "AMD EPYC™ Embedded 3000", vendor: "AMD", versions: [ { status: "unaffected", version: "SnowyOwlPI 1.1.0.E", }, ], }, { defaultStatus: "unknown", product: "AMD EPYC™ Embedded 7002", vendor: "AMD", versions: [ { status: "unaffected", version: "EmbRomePI-SP3 1.0.0.D", }, ], }, { defaultStatus: "unknown", product: "AMD EPYC™ Embedded 7003", vendor: "AMD", versions: [ { status: "unaffected", version: "EmbMilanPI-SP3 1.0.0.A", }, ], }, { defaultStatus: "unknown", product: "AMD EPYC™ Embedded 9004", vendor: "AMD", versions: [ { status: "unaffected", version: "EmbGenoaPI 1.0.0.9", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ Embedded 5000", vendor: "AMD", versions: [ { status: "unaffected", version: "EmbAM4PI 1.0.0.7", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ Embedded 7000", vendor: "AMD", versions: [ { status: "unaffected", version: "EmbeddedV2KAPI-FP6 1.0.0.7", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ Embedded V2000", vendor: "AMD", versions: [ { status: "unaffected", version: "EmbeddedPI-FP6 1.0.0.B", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ Embedded V3000", vendor: "AMD", versions: [ { status: "unaffected", version: "EmbeddedPI_FP7R2 1.0.0.C", }, ], }, { defaultStatus: "unknown", product: "AMD Ryzen™ Embedded 8000", vendor: "AMD", versions: [ { status: "unaffected", version: "EmbeddedPhoenixPI-FP7r2_1.2.0.0", }, ], }, ], datePublic: "2025-02-11T17:00:00.000Z", descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution.", }, ], value: "Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 8.2, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-20", description: "CWE-20 Improper Input Validation", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2025-02-11T20:39:03.746Z", orgId: "b58fc414-a1e4-4f92-9d70-1add41838648", shortName: "AMD", }, references: [ { url: "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7027.html", }, ], source: { discovery: "UNKNOWN", }, x_generator: { engine: "Vulnogram 0.2.0", }, }, }, cveMetadata: { assignerOrgId: "b58fc414-a1e4-4f92-9d70-1add41838648", assignerShortName: "AMD", cveId: "CVE-2024-21925", datePublished: "2025-02-11T20:39:03.746Z", dateReserved: "2024-01-03T16:43:09.232Z", dateUpdated: "2025-02-12T15:35:34.994Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
CVE-2024-0179 (GCVE-0-2024-0179)
Vulnerability from cvelistv5
Published
2025-02-11 20:52
Modified
2025-02-11 21:02
Severity ?
EPSS score ?
Summary
SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution.
References
Impacted products
| Vendor | Product | Version | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ▼ | AMD | AMD Ryzen™ 3000 Series Desktop Processors | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{ containers: { adp: [ { metrics: [ { other: { content: { id: "CVE-2024-0179", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2025-02-11T21:02:06.251311Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2025-02-11T21:02:46.740Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "AMD Ryzen™ 3000 Series Desktop Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "ComboAM4PI 1.0.0.C", }, { status: "unaffected", version: "ComboAM4v2PI 1.2.0.D", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ 5000 Series Desktop Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "ComboAM4v2PI 1.2.0.D", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "ComboAM4v2PI 1.2.0.D", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ 7000 Series Desktop Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "ComboAM5PI 1.2.0.2b", }, { status: "unaffected", version: "ComboAM5PI 1.1.0.3b", }, { status: "unaffected", version: "ComboAM5PI 1.0.0.a", }, ], }, { defaultStatus: "affected", product: "AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "ComboAM4PI 1.0.0.C", }, { status: "unaffected", version: "ComboAM4v2PI 1.2.0.D", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "ComboAM4v2PI 1.2.0.D", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "ComboAM5PI 1.2.0.2b", }, { status: "unaffected", version: "ComboAM5PI 1.1.0.3b", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ Threadripper™ 3000 Series Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "CastlePeakPI-SP3r3 1.0.0.D", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "CastlePeakWSPI-sWRX8 1.0.0.F", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "StormPeakPI-SP6 1.1.0.0h", }, { status: "unaffected", version: "StormPeakPI-SP6 1.0.0.1j", }, ], }, { defaultStatus: "affected", product: "AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "PicassoPI-FP5 1.0.1.2a", }, { status: "unaffected", version: "PollockPI-FT5 1.0.0.8a", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "PicassoPI-FP5 1.0.1.2a", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "PicassoPI-FP5 1.0.1.2a", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "PicassoPI-FP5 1.0.1.2a", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "RenoirPI-FP6 1.0.0.Ea", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "CezannePI-FP6 1.0.1.1a", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "MendocinoPI-FT6 1.0.0.7a", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "RembrandtPI-FP7 1.0.0.Ba", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "RembrandtPI-FP7 1.0.0.Ba", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "PhoenixPI-FP8-FP7 1.1.8.0", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics", vendor: "AMD", versions: [ { status: "unaffected", version: "PhoenixPI-FP8-FP7 1.1.8.0", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ 7000 Series Mobile Processors", vendor: "AMD", versions: [ { status: "unaffected", version: "DragonRangeFL1PI 1.0.0.3f", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ Embedded V2000", vendor: "AMD", versions: [ { status: "unaffected", version: "EmbeddedPI-FP6 1.0.0.B", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ Embedded V3000", vendor: "AMD", versions: [ { status: "unaffected", version: "EmbeddedPI_FP7R2 1.0.0.C", }, ], }, { defaultStatus: "affected", product: "AMD Ryzen™ Embedded 8000", vendor: "AMD", versions: [ { status: "unaffected", version: "EmbeddedPhoenixPI-FP7r2_1.2.0.0", }, ], }, ], datePublic: "2025-02-10T17:00:00.000Z", descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution.", }, ], value: "SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 8.2, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-20", description: "CWE-20 Improper Input Validation", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2025-02-11T20:52:24.110Z", orgId: "b58fc414-a1e4-4f92-9d70-1add41838648", shortName: "AMD", }, references: [ { url: "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7027.html", }, ], source: { discovery: "UNKNOWN", }, x_generator: { engine: "Vulnogram 0.2.0", }, }, }, cveMetadata: { assignerOrgId: "b58fc414-a1e4-4f92-9d70-1add41838648", assignerShortName: "AMD", cveId: "CVE-2024-0179", datePublished: "2025-02-11T20:52:24.110Z", dateReserved: "2023-12-27T16:06:35.776Z", dateUpdated: "2025-02-11T21:02:46.740Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }