Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2024-21937

Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

Description

Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Software: PRO Edition

Default version status: unaffected

  • 0 to < 24.10.16affected
  • 0 to < 24.Q2 (24.10.20)affected

AMD AMD Software: Adrenalin Edition

Default version status: unaffected

  • 0 to < 24.6.1 (24.10.21.01)affected

AMD AMD Software: Cloud Edition

Default version status: unaffected

  • 0 to < 24.7.1affected

References