← CVE Intelligence

CVE-2024-21944

AMD / AMD EPYC™ 7003 Series Processors PUBLISHED

Description (CNA)

Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to potentially overwrite guest memory resulting in loss of guest data integrity.

Affected (CNA)

Vendor / productVersions
AMD / AMD EPYC™ 7003 Series Processorsunaffected Milan PI 1.0.0.D; unaffected SEV FW 1.55.22 (hex 1.37.16)
AMD / AMD EPYC™ 9004 Series Processorunaffected Genoa PI 1.0.0.D; unaffected SEV FW 1.55.38 (hex 1.37.26)

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.