CVE-2024-21944

תיאור (מקור, אנגלית)

Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to potentially overwrite guest memory resulting in loss of guest data integrity.

מדדים

CVSS 3.1

5.3 (MEDIUM) מקור הציון: CNA CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-10/8/2026

CWE

CWE-20

קישורים

• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3015.html