CVE-2024-21947

Published Sep 6, 2025 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially resulting in arbitrary code execution at the SMM level.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-19553 Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially resulting in arbitrary code execution at the SMM level.
History
Type Values Removed Values Added
Weaknesses CWE-20
Type Values Removed Values Added
Weaknesses CWE-1220
Type Values Removed Values Added
First Time appeared Amd
Amd athlon
Amd athlon 3000
Amd ryzen
Amd ryzen 3000
Amd ryzen 4000
Amd ryzen 5000
Amd ryzen 6000
Amd ryzen 7000
Vendors & Products Amd
Amd athlon
Amd athlon 3000
Amd ryzen
Amd ryzen 3000
Amd ryzen 4000
Amd ryzen 5000
Amd ryzen 6000
Amd ryzen 7000
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially resulting in arbitrary code execution at the SMM level.
Weaknesses CWE-20
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
AMD
Published
Updated
Feb 26, 2026, 5:49 PM
Reserved
Jan 3, 2024, 4:43 PM
Status
Deferred
Published
Sep 6, 2025, 6:15 PM
Modified
Jun 17, 2026, 7:10 AM