8.2
Élevée
CVE-2024-21924 SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services…
Description
SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AMD EPYC™ 7002 Processors | Versions non publiées | |
| AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors | Versions non publiées | |
| AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors | Versions non publiées | |
| AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors | Versions non publiées | |
| AMD EPYC™ Embedded 7002 Processors | Versions non publiées |
Références
- www.amd.com www.amd.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de AMD EPYC™ 7002 Processors
Les 4 CVE de AMD EPYC™ 7002 Processors →
CVE-2024-21925
Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM,…
8.2
Élevée
CVE-2023-20578
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or…
7.5
Élevée
CVE-2021-46746
Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a…
5.2
Moyenne