CVE-2024-0179

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-0179", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "state": "PUBLISHED", "assignerShortName": "AMD", "dateReserved": "2023-12-27T16:06:35.776Z", "datePublished": "2025-02-11T20:52:24.110Z", "dateUpdated": "2026-02-26T19:08:51.506Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "AMD Ryzen\u2122 3000 Series Desktop Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ComboAM4PI 1.0.0.C"}, {"status": "unaffected", "version": "ComboAM4v2PI 1.2.0.D"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 5000 Series Desktop Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ComboAM4v2PI 1.2.0.D"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 5000 Series Desktop Processor with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ComboAM4v2PI 1.2.0.D"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 7000 Series Desktop Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ComboAM5PI 1.2.0.2b"}, {"status": "unaffected", "version": "ComboAM5PI 1.1.0.3b"}, {"status": "unaffected", "version": "ComboAM5PI 1.0.0.a"}]}, {"defaultStatus": "affected", "product": "AMD Athlon\u2122 3000 Series Desktop Processors with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ComboAM4PI 1.0.0.C"}, {"status": "unaffected", "version": "ComboAM4v2PI 1.2.0.D"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 4000 Series Desktop Processor with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ComboAM4v2PI 1.2.0.D"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 8000 Series Processor with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ComboAM5PI 1.2.0.2b"}, {"status": "unaffected", "version": "ComboAM5PI 1.1.0.3b"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Threadripper\u2122 3000 Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "CastlePeakPI-SP3r3 1.0.0.D"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 3000WX Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "CastlePeakWSPI-sWRX8 1.0.0.F"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 7000 WX-Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "StormPeakPI-SP6 1.1.0.0h"}, {"status": "unaffected", "version": "StormPeakPI-SP6 1.0.0.1j"}]}, {"defaultStatus": "affected", "product": "AMD Athlon\u2122 3000 Series Mobile Processors with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "PicassoPI-FP5 1.0.1.2a"}, {"status": "unaffected", "version": "PollockPI-FT5 1.0.0.8a"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 3000 Series Mobile Processor with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "PicassoPI-FP5 1.0.1.2a"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 3000 Series Mobile Processor with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "PicassoPI-FP5 1.0.1.2a"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 4000 Series Mobile Processors with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "PicassoPI-FP5 1.0.1.2a"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 4000 Series Mobile Processors with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "RenoirPI-FP6 1.0.0.Ea"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 5000 Series Processors with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "CezannePI-FP6 1.0.1.1a"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 7020 Series Processors with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "MendocinoPI-FT6 1.0.0.7a"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 6000 Series Processor with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "RembrandtPI-FP7 1.0.0.Ba"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 7035 Series Processor with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "RembrandtPI-FP7 1.0.0.Ba"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 7040 Series Processors with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "PhoenixPI-FP8-FP7 1.1.8.0"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 8040 Series Mobile Processors with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "PhoenixPI-FP8-FP7 1.1.8.0"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 7000 Series Mobile Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "DragonRangeFL1PI 1.0.0.3f"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Embedded V2000", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "EmbeddedPI-FP6 1.0.0.B"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Embedded V3000", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "EmbeddedPI_FP7R2 1.0.0.C"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Embedded 8000", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "EmbeddedPhoenixPI-FP7r2_1.2.0.0"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Embedded V1000", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "EmbeddedPI-FP5 1.2.0.F"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Embedded R1000", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "EmbeddedPI-FP5 1.2.0.F"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122Embedded R2000", "vendor": "AMD", "versions": [{"status": "affected", "version": "EmbeddedR2KPIFP5 1.0.0.5"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Embedded 5000", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "EmbAM4PI 1.0.0.7"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Embedded 7000", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "EmbeddedAM5PI 1.0.0.3"}]}], "datePublic": "2025-02-10T17:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution."}], "value": "SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2025-06-27T21:51:56.190Z"}, "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7027.html"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-0179", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-04-24T03:55:34.950478Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-26T19:08:51.506Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-0179", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-04-24T03:55:34.950478Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-11T21:02:14.301Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "AMD", "product": "AMD Ryzen\u2122 3000 Series Desktop Processors", "versions": [{"status": "unaffected", "version": "ComboAM4PI 1.0.0.C"}, {"status": "unaffected", "version": "ComboAM4v2PI 1.2.0.D"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 5000 Series Desktop Processors", "versions": [{"status": "unaffected", "version": "ComboAM4v2PI 1.2.0.D"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 5000 Series Desktop Processor with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "ComboAM4v2PI 1.2.0.D"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 7000 Series Desktop Processors", "versions": [{"status": "unaffected", "version": "ComboAM5PI 1.2.0.2b"}, {"status": "unaffected", "version": "ComboAM5PI 1.1.0.3b"}, {"status": "unaffected", "version": "ComboAM5PI 1.0.0.a"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Athlon\u2122 3000 Series Desktop Processors with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "ComboAM4PI 1.0.0.C"}, {"status": "unaffected", "version": "ComboAM4v2PI 1.2.0.D"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 4000 Series Desktop Processor with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "ComboAM4v2PI 1.2.0.D"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 8000 Series Processor with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "ComboAM5PI 1.2.0.2b"}, {"status": "unaffected", "version": "ComboAM5PI 1.1.0.3b"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 Threadripper\u2122 3000 Series Processors", "versions": [{"status": "unaffected", "version": "CastlePeakPI-SP3r3 1.0.0.D"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 3000WX Series Processors", "versions": [{"status": "unaffected", "version": "CastlePeakWSPI-sWRX8 1.0.0.F"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 7000 WX-Series Processors", "versions": [{"status": "unaffected", "version": "StormPeakPI-SP6 1.1.0.0h"}, {"status": "unaffected", "version": "StormPeakPI-SP6 1.0.0.1j"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Athlon\u2122 3000 Series Mobile Processors with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "PicassoPI-FP5 1.0.1.2a"}, {"status": "unaffected", "version": "PollockPI-FT5 1.0.0.8a"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 3000 Series Mobile Processor with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "PicassoPI-FP5 1.0.1.2a"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 3000 Series Mobile Processor with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "PicassoPI-FP5 1.0.1.2a"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 4000 Series Mobile Processors with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "PicassoPI-FP5 1.0.1.2a"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 4000 Series Mobile Processors with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "RenoirPI-FP6 1.0.0.Ea"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 5000 Series Processors with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "CezannePI-FP6 1.0.1.1a"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 7020 Series Processors with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "MendocinoPI-FT6 1.0.0.7a"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 6000 Series Processor with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "RembrandtPI-FP7 1.0.0.Ba"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 7035 Series Processor with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "RembrandtPI-FP7 1.0.0.Ba"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 7040 Series Processors with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "PhoenixPI-FP8-FP7 1.1.8.0"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 8040 Series Mobile Processors with Radeon\u2122 Graphics", "versions": [{"status": "unaffected", "version": "PhoenixPI-FP8-FP7 1.1.8.0"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 7000 Series Mobile Processors", "versions": [{"status": "unaffected", "version": "DragonRangeFL1PI 1.0.0.3f"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 Embedded V2000", "versions": [{"status": "unaffected", "version": "EmbeddedPI-FP6 1.0.0.B"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 Embedded V3000", "versions": [{"status": "unaffected", "version": "EmbeddedPI_FP7R2 1.0.0.C"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 Embedded 8000", "versions": [{"status": "unaffected", "version": "EmbeddedPhoenixPI-FP7r2_1.2.0.0"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 Embedded V1000", "versions": [{"status": "unaffected", "version": "EmbeddedPI-FP5 1.2.0.F"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 Embedded R1000", "versions": [{"status": "unaffected", "version": "EmbeddedPI-FP5 1.2.0.F"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122Embedded R2000", "versions": [{"status": "affected", "version": "EmbeddedR2KPIFP5 1.0.0.5"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 Embedded 5000", "versions": [{"status": "unaffected", "version": "EmbAM4PI 1.0.0.7"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 Embedded 7000", "versions": [{"status": "unaffected", "version": "EmbeddedAM5PI 1.0.0.3"}], "defaultStatus": "affected"}], "datePublic": "2025-02-10T17:00:00.000Z", "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7027.html"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution.", "supportingMedia": [{"type": "text/html", "value": "SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2025-06-27T21:51:56.190Z"}}}, "cveMetadata": {"cveId": "CVE-2024-0179", "state": "PUBLISHED", "dateUpdated": "2026-02-26T19:08:51.506Z", "dateReserved": "2023-12-27T16:06:35.776Z", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "datePublished": "2025-02-11T20:52:24.110Z", "assignerShortName": "AMD"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "product": "AMD Ryzen\u2122 3000 Series Desktop Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ComboAM4PI 1.0.0.C"}, {"status": "unaffected", "version": "ComboAM4v2PI 1.2.0.D"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 5000 Series Desktop Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ComboAM4v2PI 1.2.0.D"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 5000 Series Desktop Processor with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ComboAM4v2PI 1.2.0.D"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 7000 Series Desktop Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ComboAM5PI 1.2.0.2b"}, {"status": "unaffected", "version": "ComboAM5PI 1.1.0.3b"}, {"status": "unaffected", "version": "ComboAM5PI 1.0.0.a"}]}, {"defaultStatus": "affected", "product": "AMD Athlon\u2122 3000 Series Desktop Processors with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ComboAM4PI 1.0.0.C"}, {"status": "unaffected", "version": "ComboAM4v2PI 1.2.0.D"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 4000 Series Desktop Processor with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ComboAM4v2PI 1.2.0.D"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 8000 Series Processor with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ComboAM5PI 1.2.0.2b"}, {"status": "unaffected", "version": "ComboAM5PI 1.1.0.3b"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Threadripper\u2122 3000 Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "CastlePeakPI-SP3r3 1.0.0.D"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 3000WX Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "CastlePeakWSPI-sWRX8 1.0.0.F"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 7000 WX-Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "StormPeakPI-SP6 1.1.0.0h"}, {"status": "unaffected", "version": "StormPeakPI-SP6 1.0.0.1j"}]}, {"defaultStatus": "affected", "product": "AMD Athlon\u2122 3000 Series Mobile Processors with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "PicassoPI-FP5 1.0.1.2a"}, {"status": "unaffected", "version": "PollockPI-FT5 1.0.0.8a"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 3000 Series Mobile Processor with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "PicassoPI-FP5 1.0.1.2a"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 3000 Series Mobile Processor with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "PicassoPI-FP5 1.0.1.2a"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 4000 Series Mobile Processors with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "PicassoPI-FP5 1.0.1.2a"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 4000 Series Mobile Processors with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "RenoirPI-FP6 1.0.0.Ea"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 5000 Series Processors with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "CezannePI-FP6 1.0.1.1a"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 7020 Series Processors with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "MendocinoPI-FT6 1.0.0.7a"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 6000 Series Processor with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "RembrandtPI-FP7 1.0.0.Ba"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 7035 Series Processor with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "RembrandtPI-FP7 1.0.0.Ba"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 7040 Series Processors with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "PhoenixPI-FP8-FP7 1.1.8.0"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 8040 Series Mobile Processors with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "PhoenixPI-FP8-FP7 1.1.8.0"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 7000 Series Mobile Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "DragonRangeFL1PI 1.0.0.3f"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Embedded V2000", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "EmbeddedPI-FP6 1.0.0.B"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Embedded V3000", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "EmbeddedPI_FP7R2 1.0.0.C"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Embedded 8000", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "EmbeddedPhoenixPI-FP7r2_1.2.0.0"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Embedded V1000", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "EmbeddedPI-FP5 1.2.0.F"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Embedded R1000", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "EmbeddedPI-FP5 1.2.0.F"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122Embedded R2000", "vendor": "AMD", "versions": [{"status": "affected", "version": "EmbeddedR2KPIFP5 1.0.0.5"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Embedded 5000", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "EmbAM4PI 1.0.0.7"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Embedded 7000", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "EmbeddedAM5PI 1.0.0.3"}]}], "source": "psirt@amd.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution."}, {"lang": "es", "value": "La vulnerabilidad de llamada SMM dentro del controlador AmdCpmDisplayFeatureSMM podr\u00eda permitir que atacantes autenticados localmente sobrescriban SMRAM, lo que podr\u00eda resultar en la ejecuci\u00f3n de c\u00f3digo arbitrario."}], "id": "CVE-2024-0179", "lastModified": "2026-06-17T06:52:56.607", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.5, "impactScore": 6.0, "source": "psirt@amd.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-0179", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-04-24T03:55:34.950478Z", "version": "2.0.3"}}]}, "published": "2025-02-11T21:15:12.280", "references": [{"source": "psirt@amd.com", "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7027.html"}], "sourceIdentifier": "psirt@amd.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "psirt@amd.com", "type": "Secondary"}]}

{"bugzilla": {"description": "kernel: hw:amd: SMM callout vulnerability within the AmdCpmDisplayFeatureSMM", "id": "2342329", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2342329"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.2", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-119", "details": ["SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution.", "A flaw was found in the UEFI module's System Management Mode (SMM). SMM callout within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution."], "mitigation": {"lang": "en:us", "value": "Available mitigation requires updating the BIOS (updating firmware of the CPU). The bug affects hardware (processors of the AMD EPYC\u2122 family)."}, "name": "CVE-2024-0179", "public_date": "2025-02-11T10:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-0179"], "statement": "These vulnerabilities can allow a ring 0 attacker to escalate their privileges,\npotentially resulting in arbitrary code execution within SMM.\nRed Hat has very limited to no visibility and control over binary blobs provided by third-party vendors. Red Hat relies heavily on the vendors to provide timely updates and information about included changes for this content and in most cases merely acts as a release vehicle between the third-party vendor and Red Hat customers with no possibility of influencing or even documenting the changes. \nUnless explicitly stated, the level of insight, oversight, and control Red Hat has does not meet the criteria required (in terms of Red Hat ownership of development processes, QA, and documentation) for releasing this content as RHSA. For more information please contact the binary content vendor.", "threat_severity": "Important"}

{}