Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2024-0179

SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code executio

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Ryzen™ 3000 Series Desktop Processors

Default version status: affected

  • ComboAM4PI 1.0.0.Cunaffected
  • ComboAM4v2PI 1.2.0.Dunaffected

AMD AMD Ryzen™ 5000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2PI 1.2.0.Dunaffected

AMD AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics

Default version status: affected

  • ComboAM4v2PI 1.2.0.Dunaffected

AMD AMD Ryzen™ 7000 Series Desktop Processors

Default version status: affected

  • ComboAM5PI 1.2.0.2bunaffected
  • ComboAM5PI 1.1.0.3bunaffected
  • ComboAM5PI 1.0.0.aunaffected

AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics

Default version status: affected

  • ComboAM4PI 1.0.0.Cunaffected
  • ComboAM4v2PI 1.2.0.Dunaffected

AMD AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics

Default version status: affected

  • ComboAM4v2PI 1.2.0.Dunaffected

AMD AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics

Default version status: affected

  • ComboAM5PI 1.2.0.2bunaffected
  • ComboAM5PI 1.1.0.3bunaffected

AMD AMD Ryzen™ Threadripper™ 3000 Series Processors

Default version status: affected

  • CastlePeakPI-SP3r3 1.0.0.Dunaffected

AMD AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors

Default version status: affected

  • CastlePeakWSPI-sWRX8 1.0.0.Funaffected

AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors

Default version status: affected

  • StormPeakPI-SP6 1.1.0.0hunaffected
  • StormPeakPI-SP6 1.0.0.1junaffected

AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • PicassoPI-FP5 1.0.1.2aunaffected
  • PollockPI-FT5 1.0.0.8aunaffected

AMD AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics

Default version status: affected

  • PicassoPI-FP5 1.0.1.2aunaffected

AMD AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics

Default version status: affected

  • PicassoPI-FP5 1.0.1.2aunaffected

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • PicassoPI-FP5 1.0.1.2aunaffected

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • RenoirPI-FP6 1.0.0.Eaunaffected

AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics

Default version status: affected

  • CezannePI-FP6 1.0.1.1aunaffected

AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Default version status: affected

  • MendocinoPI-FT6 1.0.0.7aunaffected

AMD AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics

Default version status: affected

  • RembrandtPI-FP7 1.0.0.Baunaffected

AMD AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics

Default version status: affected

  • RembrandtPI-FP7 1.0.0.Baunaffected

AMD AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics

Default version status: affected

  • PhoenixPI-FP8-FP7 1.1.8.0unaffected

AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • PhoenixPI-FP8-FP7 1.1.8.0unaffected

AMD AMD Ryzen™ 7000 Series Mobile Processors

Default version status: affected

  • DragonRangeFL1PI 1.0.0.3funaffected

AMD AMD Ryzen™ Embedded V2000

Default version status: affected

  • EmbeddedPI-FP6 1.0.0.Bunaffected

AMD AMD Ryzen™ Embedded V3000

Default version status: affected

  • EmbeddedPI_FP7R2 1.0.0.Cunaffected

AMD AMD Ryzen™ Embedded 8000

Default version status: affected

  • EmbeddedPhoenixPI-FP7r2_1.2.0.0unaffected

AMD AMD Ryzen™ Embedded V1000

Default version status: affected

  • EmbeddedPI-FP5 1.2.0.Funaffected

AMD AMD Ryzen™ Embedded R1000

Default version status: affected

  • EmbeddedPI-FP5 1.2.0.Funaffected

AMD AMD Ryzen™Embedded R2000

Default version status: affected

  • EmbeddedR2KPIFP5 1.0.0.5affected

AMD AMD Ryzen™ Embedded 5000

Default version status: affected

  • EmbAM4PI 1.0.0.7unaffected

AMD AMD Ryzen™ Embedded 7000

Default version status: affected

  • EmbeddedAM5PI 1.0.0.3unaffected

References