Log in Start free

Vulnerability · Published Feb 11, 2025 · Assigned by AMD

CVE-2024-0179

High 8.2

In plain English

A high-severity improper input validation in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics from AMD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).

Severity (CVSS 3.1)8.2High
Exploit odds (30 days)0.2%top 89.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution.

Affected products (as reported)

VendorProductVersions
AMD AMD Ryzen™ 3000 Series Desktop Processors see references
AMD AMD Ryzen™ 5000 Series Desktop Processors see references
AMD AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics see references
AMD AMD Ryzen™ 7000 Series Desktop Processors see references
AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics see references
AMD AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics see references
AMD AMD Ryzen™ Threadripper™ 3000 Series Processors see references
AMD AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors see references
AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors see references
AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics see references
AMD AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics see references
AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics see references
AMD AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics see references
AMD AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 7000 Series Mobile Processors see references
AMD AMD Ryzen™ Embedded V2000 see references
AMD AMD Ryzen™ Embedded V3000 see references
AMD AMD Ryzen™ Embedded 8000 see references
AMD AMD Ryzen™ Embedded V1000 see references
AMD AMD Ryzen™ Embedded R1000 see references
AMD AMD Ryzen™Embedded R2000 EmbeddedR2KPIFP5 1.0.0.5
AMD AMD Ryzen™ Embedded 5000 see references
AMD AMD Ryzen™ Embedded 7000 see references

Weakness: CWE-20 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References