fr Sign in

8.2 High

CVE-2024-0179 SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to…

Description

SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution.

Affected products and versions

Product	Affected versions	Fixed in
AMD Ryzen™ 3000 Series Desktop Processors	Versions not published
AMD Ryzen™ 5000 Series Desktop Processors	Versions not published
AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics	Versions not published
AMD Ryzen™ 7000 Series Desktop Processors	Versions not published
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics	Versions not published
AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics	Versions not published
AMD Ryzen™ Threadripper™ 3000 Series Processors	Versions not published
AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors	Versions not published

Show the 19 other branches

Product	Affected versions	Fixed in
AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors	Versions not published
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics	Versions not published
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics	Versions not published
AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics	Versions not published
AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ 7000 Series Mobile Processors	Versions not published
AMD Ryzen™ Embedded V2000	Versions not published
AMD RyzenTM Embedded V3000	Versions not published
AMD Ryzen™ Embedded 8000	Versions not published
AMD Ryzen™ Embedded V1000	Versions not published
AMD Ryzen™ Embedded R1000	Versions not published
AMD Ryzen™Embedded R2000	Versions not published
AMD Ryzen™ Embedded 5000	Versions not published
AMD Ryzen™ Embedded 7000	Versions not published

References

www.amd.com www.amd.com

Timeline

Published February 11, 2025
Last modified February 26, 2026

The 43 CVEs of AMD Ryzen™ 3000 Series Desktop Processors →

CVE-2023-20577 A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI… 7.4 High CVE-2023-20576 Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially… 7.7 High CVE-2023-20572 An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against… 5.6 Medium CVE-2023-20540 An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against… 1.8 Low

Track this CVE