Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-21944

Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or contro

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to potentially overwrite guest memory resulting in loss of guest data integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD EPYC™ 7003 Series Processors

Default version status: affected

  • Milan PI 1.0.0.Dunaffected
  • SEV FW 1.55.22 (hex 1.37.16)unaffected

AMD AMD EPYC™ 9004 Series Processor

Default version status: affected

  • Genoa PI 1.0.0.Dunaffected
  • SEV FW 1.55.38 (hex 1.37.26)unaffected

References