Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-21947

Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially resulting in arbitrary code execution at t

Description

Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially resulting in arbitrary code execution at the SMM level.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Ryzen™ Threadripper™ 3000 Processors

Default version status: affected

  • CastlePeakPI-SP3r3 1.0.0.Cunaffected

AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors

Default version status: affected

  • ChagallWSPI-sWRX8-1.0.0.7unaffected

AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • CezannePI-FP6_1.0.1.0unaffected

AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors

Default version status: affected

  • CastlePeakWSPI-sWRX8 1.0.0.Eunaffected
  • ChagallWSPI-sWRX8-1.0.0.7unaffected

AMD AMD Ryzen™ 3000 Series Desktop Processors

Default version status: affected

  • ComboAM4 1.0.0.Bunaffected
  • ComboAM4v2PI_1.2.0.CAunaffected

AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • Picasso-FP5 1.0.1.1unaffected

AMD AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • Picasso-FP5 1.0.1.1unaffected

AMD AMD Ryzen™ 5000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2PI_1.2.0.CAunaffected

AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics

Default version status: affected

  • ComboAM4 1.0.0.Bunaffected

AMD AMD Ryzen™ 8000 Series Desktop Processors

Default version status: affected

  • ComboAM5 1.2.0.0unaffected

AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • PhoenixPI-FP8-FP7_1.1.0.2unaffected

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • Renoir-FP6 1.0.0.Dunaffected

AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics

Default version status: affected

  • Rembrandt-FP7 1.0.0.Aunaffected

AMD AMD Ryzen™ 7000 Series Desktop Processors

Default version status: affected

  • ComboAM5 1.2.0.0unaffected

AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Default version status: affected

  • MendocinoPI-FT6_1.0.0.6unaffected

AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • DragonRangeFL1 1.0.0.3dunaffected

AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics

Default version status: affected

  • Rembrandt-FP7 1.0.0.Aunaffected

AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • CezannePI-FP6_1.0.1.0unaffected

AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics

Default version status: affected

  • ComboAM4v2PI_1.2.0.CAunaffected

AMD AMD Ryzen™ 4000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2PI_1.2.0.CAunaffected

AMD AMD Ryzen™ Embedded R1000 Series Processors

Default version status: affected

  • EmbeddedPI-FP5 120Cunaffected

AMD AMD Ryzen™ Embedded R2000 Series Processors

Default version status: affected

  • EmbeddedR2KPI-FP5_1003unaffected

AMD AMD Ryzen™ Embedded 5000 Series Processors

Default version status: affected

  • EmbAM4PI 1.0.0.5unaffected

AMD AMD Ryzen™ Embedded V1000 Series Processors

Default version status: affected

  • EmbeddedPI-FP5 120Cunaffected

AMD AMD Ryzen™ Embedded V2000 Series Processors

Default version status: affected

  • EmbeddedPI-FP6_1.0.0.Aunaffected

AMD AMD Ryzen™ Embedded V3000 Series Processors

Default version status: affected

  • Embedded-PI_FP7r2 1009unaffected

References