CVEvulnerability

CVE-2024-21924

8.2 HIGH Published 2025-02-11 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-02-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.2 HIGH — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-250

Description

SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.

Related

Weakness · CWE (1)

  • CWE-250 Execution with Unnecessary Privileges weakness

References