CVEvulnerability

CVE-2024-21978

7.9 HIGH Published 2024-08-05 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-08-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1 ([email protected])
7.9 HIGH — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Weaknesses
CWE-20

Description

Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.

Affected configurations

• amd epyc 7203 firmware (< milanpi 1.0.0.d) • amd epyc 7203p firmware (< milanpi 1.0.0.d) • amd epyc 72f3 firmware (< milanpi 1.0.0.d) • amd epyc 7303 firmware (< milanpi 1.0.0.d) • amd epyc 7303p firmware (< milanpi 1.0.0.d) • amd epyc 7313 firmware (< milanpi 1.0.0.d) • amd epyc 7313p firmware (< milanpi 1.0.0.d) • amd epyc 7343 firmware (< milanpi 1.0.0.d) • amd epyc 73f3 firmware (< milanpi 1.0.0.d) • amd epyc 7373x firmware (< milanpi 1.0.0.d) • amd epyc 7413 firmware (< milanpi 1.0.0.d) • amd epyc 7443 firmware (< milanpi 1.0.0.d) • amd epyc 7443p firmware (< milanpi 1.0.0.d) • amd epyc 74f3 firmware (< milanpi 1.0.0.d) • amd epyc 7453 firmware (< milanpi 1.0.0.d) • amd epyc 7473x firmware (< milanpi 1.0.0.d) • amd epyc 7513 firmware (< milanpi 1.0.0.d) • amd epyc 7543 firmware (< milanpi 1.0.0.d) • amd epyc 7543p firmware (< milanpi 1.0.0.d) • amd epyc 75f3 firmware (< milanpi 1.0.0.d) • amd epyc 7573x firmware (< milanpi 1.0.0.d) • amd epyc 7643 firmware (< milanpi 1.0.0.d) • amd epyc 7773x firmware (< milanpi 1.0.0.d) • amd epyc 7643p firmware (< milanpi 1.0.0.d) • amd epyc 7663 firmware (< milanpi 1.0.0.d) • amd epyc 7663p firmware (< milanpi 1.0.0.d) • amd epyc 7713 firmware (< milanpi 1.0.0.d) • amd epyc 7713p firmware (< milanpi 1.0.0.d) • amd epyc 7763 firmware (< milanpi 1.0.0.d) • amd epyc 8024pn firmware (< genoapi 1.0.0.c) • amd epyc 8024p firmware (< genoapi 1.0.0.c) • amd epyc 8124pn firmware (< genoapi 1.0.0.c) • amd epyc 8124p firmware (< genoapi 1.0.0.c) • amd epyc 8224pn firmware (< genoapi 1.0.0.c) • amd epyc 8224p firmware (< genoapi 1.0.0.c) • amd epyc 8324pn firmware (< genoapi 1.0.0.c) • amd epyc 8324p firmware (< genoapi 1.0.0.c) • amd epyc 8434pn firmware (< genoapi 1.0.0.c) • amd epyc 8434p firmware (< genoapi 1.0.0.c) • amd epyc 8534pn firmware (< genoapi 1.0.0.c) • amd epyc 8534p firmware (< genoapi 1.0.0.c) • amd epyc 9734 firmware (< genoapi 1.0.0.c) • amd epyc 9754s firmware (< genoapi 1.0.0.c) • amd epyc 9754 firmware (< genoapi 1.0.0.c) • amd epyc 9184x firmware (< genoapi 1.0.0.c) • amd epyc 9384x firmware (< genoapi 1.0.0.c) • amd epyc 9684x firmware (< genoapi 1.0.0.c) • amd epyc 9124 firmware (< genoapi 1.0.0.c) • amd epyc 9174f firmware (< genoapi 1.0.0.c) • amd epyc 9224 firmware (< genoapi 1.0.0.c) • amd epyc 9254 firmware (< genoapi 1.0.0.c) • amd epyc 9274f firmware (< genoapi 1.0.0.c) • amd epyc 9334 firmware (< genoapi 1.0.0.c) • amd epyc 9354 firmware (< genoapi 1.0.0.c) • amd epyc 9354p firmware (< genoapi 1.0.0.c) • amd epyc 9374f firmware (< genoapi 1.0.0.c) • amd epyc 9454 firmware (< genoapi 1.0.0.c) • amd epyc 9454p firmware (< genoapi 1.0.0.c) • amd epyc 9474f firmware (< genoapi 1.0.0.c) • amd epyc 9534 firmware (< genoapi 1.0.0.c) … and 26 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References