Vulnerability-Lookup

BDU:2025-01835 (CVE-2024-21925)

Vulnerability from fstec – Published: 2025-02-20 – Updated: 2025-09-30 – View on bdu.fstec.ru Fixed

Title

Уязвимость драйвера AmdPspP2CmboxV2 микропрограммного обеспечения процессоров AMD, позволяющая нарушителю выполнить произвольный код

Summary

Уязвимость драйвера AmdPspP2CmboxV2 микропрограммного обеспечения процессоров AMD связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код

Severity

6.8 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:C/I:C/A:C

8.2 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2024-21925, AMD-SB-7027

References

2 references

URL
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7027.html
http://repo.red-soft.ru/redos/7.3c/x86_64/updates/

Impacted products

43 products from 2 vendors

Vendors

ООО «Ред Софт», Advanced Micro Devices Inc.

Products

РЕД ОС (запись в едином реестре российских программ №3751), AMD Ryzen Embedded R1000, AMD Ryzen Embedded R2000, AMD Ryzen Embedded V1000, 4th Gen AMD EPYC, 2nd Gen AMD EPYC, AMD EPYC Embedded 7002, AMD Ryzen Threadripper PRO 7000 WX-Series Processors, AMD Ryzen Threadripper PRO 3000WX Series Processors, AMD Ryzen 5000 Series Desktop Processors Vermeer AM4, AMD Ryzen 5000 Series Desktop processor with Radeon graphics, AMD Ryzen 7000 Series Processors Raphael, AMD Ryzen 3000 Series Desktop Processors Matisse AM4, AMD Athlon 3000 Series Desktop Processors with Radeon Graphics, AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix, AMD Ryzen Threadripper 3000 Series Processors, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock, AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso, AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne, AMD Ryzen 7020 Series Mobile Processors Mendocino, AMD Ryzen 6000 Series Mobile Processors Rembrandt, AMD Ryzen 7035 Series Mobile Processors with Radeon Graphics, AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo, AMD Ryzen 7000 Series Processors with Radeon Graphics, AMD Ryzen 7040 Series Mobile Processors with Radeon Graphics, AMD Ryzen 8040 Series Mobile Processors with Radeon Graphics Hawk Point, AMD Ryzen 7000 Series Mobile Processors Dragon Range, AMD Ryzen Embedded 8000, AMD Ryzen Embedded V2000, AMD Ryzen Embedded V3000, 1st Gen AMD EPYC, 3rd Gen AMD EPYC, AMD Instinct MI300A, AMD Ryzen Threadripper PRO 5000 WX-Series, AMD EPYC Embedded 3000, AMD EPYC Embedded 7003, AMD EPYC Embedded 9003, AMD Ryzen Embedded 5000, AMD Ryzen Embedded 7000

Versions

7.3 (РЕД ОС), - (AMD Ryzen Embedded R1000), - (AMD Ryzen Embedded R2000), - (AMD Ryzen Embedded V1000), до GenoaPI 1.0.0.D (4th Gen AMD EPYC), до Rome PI 1.0.0.K (2nd Gen AMD EPYC), до EmbRomePI-SP3 1.0.0.D (AMD EPYC Embedded 7002), до StormPeakPI-SP6 1.0.0.1j (AMD Ryzen Threadripper PRO 7000 WX-Series Processors), до StormPeakPI-SP6 1.1.0.0h (AMD Ryzen Threadripper PRO 7000 WX-Series Processors), до ChagallWSPI-sWRX8 1.0.0.9 (AMD Ryzen Threadripper PRO 3000WX Series Processors), до ComboAM4v2PI 1.2.0.D (AMD Ryzen 5000 Series Desktop Processors Vermeer AM4), до ComboAM4v2PI 1.2.0.D (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), до ComboAM5PI 1.2.0.2b (AMD Ryzen 7000 Series Processors Raphael), до ComboAM5PI 1.1.0.3b (AMD Ryzen 7000 Series Processors Raphael), до ComboAM5PI 1.0.0.a (AMD Ryzen 7000 Series Processors Raphael), до ComboAM4PI 1.0.0.C (AMD Ryzen 3000 Series Desktop Processors Matisse AM4), до ComboAM4v2PI 1.2.0.D (AMD Ryzen 3000 Series Desktop Processors Matisse AM4), до ComboAM4PI 1.0.0.C (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), до ComboAM4v2PI 1.2.0.D (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), до ComboAM4v2PI 1.2.0.D (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), до ComboAM5PI 1.2.0.2b (AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix), до ComboAM5PI 1.1.0.3b (AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix), до CastlePeakPI-SP3r3 1.0.0.D (AMD Ryzen Threadripper 3000 Series Processors), до CastlePeakWSPI-sWRX8 1.0.0.F (AMD Ryzen Threadripper PRO 3000WX Series Processors), до PicassoPI-FP5 1.0.1.2a (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5), до PollockPI-FT5 1.0.0.8a (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock), до PicassoPI-FP5 1.0.1.2a (AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso), до RenoirPI-FP6 1.0.0.Ea (AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6), до CezannePI-FP6 1.0.1.1a (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne), до CezannePI-FP6 1.0.1.1a (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne), до MendocinoPI-FT6 1.0.0.7a (AMD Ryzen 7020 Series Mobile Processors Mendocino), до RembrandtPI-FP7 1.0.0.Ba (AMD Ryzen 6000 Series Mobile Processors Rembrandt), до RembrandtPI-FP7 1.0.0.Ba (AMD Ryzen 7035 Series Mobile Processors with Radeon Graphics), до CezannePI-FP6 1.0.1.1a (AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo), до CezannePI-FP6 1.0.1.1a (AMD Ryzen 7000 Series Processors with Radeon Graphics), до PhoenixPI-FP8-FP7 1.1.8.0 (AMD Ryzen 7040 Series Mobile Processors with Radeon Graphics), до PhoenixPI-FP8-FP7 1.1.8.0 (AMD Ryzen 8040 Series Mobile Processors with Radeon Graphics Hawk Point), до DragonRangeFL1PI 1.0.0.3f (AMD Ryzen 7000 Series Mobile Processors Dragon Range), до EmbeddedPhoenixPI-FP7r2_1.2.0.0 (AMD Ryzen Embedded 8000), до EmbeddedPI-FP6 1.0.0.B (AMD Ryzen Embedded V2000), до EmbeddedPI_FP7R2 1.0.0.C (AMD Ryzen Embedded V3000), до Naples PI 1.0.0.N (1st Gen AMD EPYC), до Milan PI 1.0.0.E (3rd Gen AMD EPYC), до MI300PI 1.0.0.5 (AMD Instinct MI300A), до ChagallWSPI-sWRX8 1.0.0.9 (AMD Ryzen Threadripper PRO 5000 WX-Series), до SnowyOwlPI 1.1.0.E (AMD EPYC Embedded 3000), до EmbMilanPI-SP3 1.0.0.A (AMD EPYC Embedded 7003), до EmbGenoaPI 1.0.0.9 (AMD EPYC Embedded 9003), до EmbAM4PI 1.0.0.7 (AMD Ryzen Embedded 5000), до EmbeddedV2KAPI-FP6 1.0.0.7 (AMD Ryzen Embedded 7000)

Product types

Operating system, Микропрограммный код аппаратных компонентов компьютера, Firmware, Appliance software

Platforms

ООО «Ред Софт» РЕД ОС 7.3 (запись в едином реестре российских программ №3751)

Mitigations

Использование рекомендаций: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7027.html Для РедОС: http://repo.red-soft.ru/redos/7.3c/x86_64/updates/

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb, Advanced Micro Devices Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "7.3 (\u0420\u0415\u0414 \u041e\u0421), - (AMD Ryzen Embedded R1000), - (AMD Ryzen Embedded R2000), - (AMD Ryzen Embedded V1000), \u0434\u043e GenoaPI 1.0.0.D (4th Gen AMD EPYC), \u0434\u043e Rome PI 1.0.0.K (2nd Gen AMD EPYC), \u0434\u043e EmbRomePI-SP3 1.0.0.D (AMD EPYC Embedded 7002), \u0434\u043e StormPeakPI-SP6 1.0.0.1j (AMD Ryzen Threadripper PRO 7000 WX-Series Processors), \u0434\u043e StormPeakPI-SP6 1.1.0.0h (AMD Ryzen Threadripper PRO 7000 WX-Series Processors), \u0434\u043e ChagallWSPI-sWRX8 1.0.0.9 (AMD Ryzen Threadripper PRO 3000WX Series Processors), \u0434\u043e ComboAM4v2PI 1.2.0.D (AMD Ryzen 5000 Series Desktop Processors Vermeer AM4), \u0434\u043e ComboAM4v2PI 1.2.0.D (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), \u0434\u043e ComboAM5PI 1.2.0.2b (AMD Ryzen 7000 Series Processors Raphael), \u0434\u043e ComboAM5PI 1.1.0.3b (AMD Ryzen 7000 Series Processors Raphael), \u0434\u043e ComboAM5PI 1.0.0.a (AMD Ryzen 7000 Series Processors Raphael), \u0434\u043e ComboAM4PI 1.0.0.C (AMD Ryzen 3000 Series Desktop Processors Matisse AM4), \u0434\u043e ComboAM4v2PI 1.2.0.D (AMD Ryzen 3000 Series Desktop Processors Matisse AM4), \u0434\u043e ComboAM4PI 1.0.0.C (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), \u0434\u043e ComboAM4v2PI 1.2.0.D (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), \u0434\u043e ComboAM4v2PI 1.2.0.D (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), \u0434\u043e ComboAM5PI 1.2.0.2b (AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix), \u0434\u043e ComboAM5PI 1.1.0.3b (AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix), \u0434\u043e CastlePeakPI-SP3r3 1.0.0.D (AMD Ryzen Threadripper 3000 Series Processors), \u0434\u043e CastlePeakWSPI-sWRX8 1.0.0.F (AMD Ryzen Threadripper PRO 3000WX Series Processors), \u0434\u043e PicassoPI-FP5 1.0.1.2a (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5), \u0434\u043e PollockPI-FT5 1.0.0.8a (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock), \u0434\u043e PicassoPI-FP5 1.0.1.2a (AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso), \u0434\u043e RenoirPI-FP6 1.0.0.Ea (AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6), \u0434\u043e CezannePI-FP6 1.0.1.1a (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne), \u0434\u043e CezannePI-FP6 1.0.1.1a (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne), \u0434\u043e MendocinoPI-FT6 1.0.0.7a (AMD Ryzen 7020 Series Mobile Processors Mendocino), \u0434\u043e RembrandtPI-FP7 1.0.0.Ba (AMD Ryzen 6000 Series Mobile Processors Rembrandt), \u0434\u043e RembrandtPI-FP7 1.0.0.Ba (AMD Ryzen 7035 Series Mobile Processors with Radeon Graphics), \u0434\u043e CezannePI-FP6 1.0.1.1a (AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo), \u0434\u043e CezannePI-FP6 1.0.1.1a (AMD Ryzen 7000 Series Processors with Radeon Graphics), \u0434\u043e PhoenixPI-FP8-FP7 1.1.8.0 (AMD Ryzen 7040 Series Mobile Processors with Radeon Graphics), \u0434\u043e PhoenixPI-FP8-FP7 1.1.8.0 (AMD Ryzen 8040 Series Mobile Processors with Radeon Graphics Hawk Point), \u0434\u043e DragonRangeFL1PI 1.0.0.3f (AMD Ryzen 7000 Series Mobile Processors Dragon Range), \u0434\u043e EmbeddedPhoenixPI-FP7r2_1.2.0.0 (AMD Ryzen Embedded 8000), \u0434\u043e EmbeddedPI-FP6 1.0.0.B (AMD Ryzen Embedded V2000), \u0434\u043e EmbeddedPI_FP7R2 1.0.0.C (AMD Ryzen Embedded V3000), \u0434\u043e Naples PI 1.0.0.N (1st Gen AMD EPYC), \u0434\u043e Milan PI 1.0.0.E (3rd Gen AMD EPYC), \u0434\u043e MI300PI 1.0.0.5 (AMD Instinct MI300A), \u0434\u043e ChagallWSPI-sWRX8 1.0.0.9 (AMD Ryzen Threadripper PRO 5000 WX-Series), \u0434\u043e SnowyOwlPI 1.1.0.E (AMD EPYC Embedded 3000), \u0434\u043e EmbMilanPI-SP3 1.0.0.A (AMD EPYC Embedded 7003), \u0434\u043e EmbGenoaPI 1.0.0.9 (AMD EPYC Embedded 9003), \u0434\u043e EmbAM4PI 1.0.0.7 (AMD Ryzen Embedded 5000), \u0434\u043e EmbeddedV2KAPI-FP6 1.0.0.7 (AMD Ryzen Embedded 7000)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-7027.html\n\n\u0414\u043b\u044f \u0420\u0435\u0434\u041e\u0421: \nhttp://repo.red-soft.ru/redos/7.3c/x86_64/updates/",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "11.02.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "30.09.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "20.02.2025",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-01835",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-21925, AMD-SB-7027",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "\u0420\u0415\u0414 \u041e\u0421 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), AMD Ryzen Embedded R1000, AMD Ryzen Embedded R2000, AMD Ryzen Embedded V1000, 4th Gen AMD EPYC, 2nd Gen AMD EPYC, AMD EPYC Embedded 7002, AMD Ryzen Threadripper PRO 7000 WX-Series Processors, AMD Ryzen Threadripper PRO 3000WX Series Processors, AMD Ryzen 5000 Series Desktop Processors Vermeer AM4, AMD Ryzen 5000 Series Desktop processor with Radeon graphics, AMD Ryzen 7000 Series Processors Raphael, AMD Ryzen 3000 Series Desktop Processors Matisse AM4, AMD Athlon 3000 Series Desktop Processors with Radeon Graphics, AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix, AMD Ryzen Threadripper 3000 Series Processors, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock, AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso, AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne, AMD Ryzen 7020 Series Mobile Processors Mendocino, AMD Ryzen 6000 Series Mobile Processors Rembrandt, AMD Ryzen 7035 Series Mobile Processors with Radeon Graphics, AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo, AMD Ryzen 7000 Series Processors with Radeon Graphics, AMD Ryzen 7040 Series Mobile Processors with Radeon Graphics, AMD Ryzen 8040 Series Mobile Processors with Radeon Graphics Hawk Point, AMD Ryzen 7000 Series Mobile Processors Dragon Range, AMD Ryzen Embedded 8000, AMD Ryzen Embedded V2000, AMD Ryzen Embedded V3000, 1st Gen AMD EPYC, 3rd Gen AMD EPYC, AMD Instinct MI300A, AMD Ryzen Threadripper PRO 5000 WX-Series, AMD EPYC Embedded 3000, AMD EPYC Embedded 7003, AMD EPYC Embedded 9003, AMD Ryzen Embedded 5000, AMD Ryzen Embedded 7000",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb \u0420\u0415\u0414 \u041e\u0421 7.3  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 AmdPspP2CmboxV2 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 AmdPspP2CmboxV2 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7027.html\nhttp://repo.red-soft.ru/redos/7.3c/x86_64/updates/",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,2)"
}

CVE-2024-21925 (GCVE-0-2024-21925)

Vulnerability from cvelistv5 – Published: 2025-02-11 20:39 – Updated: 2025-06-27 21:55

Summary

Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution.

Severity

8.2 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-11 21:01 UTC

CWE

CWE-20 - Improper Input Validation

Assigner

AMD mitre root

References

1 reference

URL	Tags
https://www.amd.com/en/resources/product-security…

Impacted products

37 products

Vendor	Product	Version
AMD	AMD EPYC™ 7001 Processors	Unaffected: Naples PI 1.0.0.N
AMD	AMD EPYC™ 7002 Processors	Unaffected: Rome PI 1.0.0.K
AMD	AMD EPYC™ 9004 Processors	Unaffected: Genoa PI 1.0.0.D
AMD	AMD EPYC™ 7003 Processors	Unaffected: Milan PI 1.0.0.E
AMD	AMD Ryzen™ 3000 Series Desktop Processors	Unaffected: ComboAM4PI 1.0.0.C Unaffected: ComboAM4v2PI 1.2.0.D
AMD	AMD Ryzen™ 5000 Series Desktop Processors	Unaffected: ComboAM4v2PI 1.2.0.D
AMD	AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics	Unaffected: ComboAM4v2PI 1.2.0.D
AMD	AMD Ryzen™ 7000 Series Desktop Processors	Unaffected: ComboAM5PI 1.2.0.2b Unaffected: ComboAM5PI 1.1.0.3b Unaffected: ComboAM5PI 1.0.0.a
AMD	AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics	Unaffected: ComboAM4PI 1.0.0.C Unaffected: ComboAM4v2PI 1.2.0.D
AMD	AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics	Unaffected: ComboAM4v2PI 1.2.0.D
AMD	AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics	Unaffected: ComboAM5PI 1.2.0.2b Unaffected: ComboAM5PI 1.1.0.3b
AMD	AMD Ryzen™ Threadripper™ 3000 Series Processors	Unaffected: CastlePeakPI-SP3r3 1.0.0.D
AMD	AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors	Unaffected: CastlePeakWSPI-sWRX8 1.0.0.F Unaffected: ChagallWSPI-sWRX8 1.0.0.9
AMD	AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors	Unaffected: ChagallWSPI-sWRX8 1.0.0.9
AMD	AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors	Unaffected: StormPeakPI-SP6 1.1.0.0h Unaffected: StormPeakPI-SP6 1.0.0.1j
AMD	AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics	Unaffected: PicassoPI-FP5 1.0.1.2a Unaffected: PollockPI-FT5 1.0.0.8a
AMD	AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics	Unaffected: PicassoPI-FP5 1.0.1.2a
AMD	AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics	Unaffected: RenoirPI-FP6 1.0.0.Ea
AMD	AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics	Unaffected: CezannePI-FP6 1.0.1.1a
AMD	AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics	Unaffected: MendocinoPI-FT6 1.0.0.7a
AMD	AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics	Unaffected: RembrandtPI-FP7 1.0.0.Ba
AMD	AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics	Unaffected: RembrandtPI-FP7 1.0.0.Ba
AMD	AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics	Unaffected: PhoenixPI-FP8-FP7 1.1.8.0
AMD	AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics	Unaffected: PhoenixPI-FP8-FP7 1.1.8.0
AMD	AMD Ryzen™ 7000 Series Mobile Processors	Unaffected: DragonRangeFL1PI 1.0.0.3f
AMD	AMD EPYC™ Embedded 3000	Unaffected: SnowyOwlPI 1.1.0.E
AMD	AMD EPYC™ Embedded 7002	Unaffected: EmbRomePI-SP3 1.0.0.D
AMD	AMD EPYC™ Embedded 7003	Unaffected: EmbMilanPI-SP3 1.0.0.A
AMD	AMD EPYC™ Embedded 9004	Unaffected: EmbGenoaPI 1.0.0.9
AMD	AMD Ryzen™ Embedded 5000	Unaffected: EmbAM4PI 1.0.0.7
AMD	AMD Ryzen™ Embedded 7000	Unaffected: EmbeddedV2KAPI-FP6 1.0.0.7
AMD	AMD Ryzen™ Embedded V2000	Unaffected: EmbeddedPI-FP6 1.0.0.B
AMD	AMD Ryzen™ Embedded V3000	Unaffected: EmbeddedPI_FP7R2 1.0.0.C
AMD	AMD Ryzen™ Embedded 8000	Unaffected: EmbeddedPhoenixPI-FP7r2_1.2.0.0
AMD	AMD Ryzen™ Embedded R1000	Unaffected: EmbeddedPI-FP5 1.2.0.F
AMD	AMD Ryzen™ Embedded R2000	Unaffected: EmbeddedR2KPIFP5 1.0.0.5
AMD	AMD Ryzen™ Embedded V1000	Unaffected: EmbeddedPI-FP5 1.2.0.F

Date Public

2025-02-11 17:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-21925",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-11T21:01:07.683566Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-12T15:35:34.994Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "AMD EPYC\u2122 7001 Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Naples PI 1.0.0.N"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD EPYC\u2122 7002 Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Rome PI 1.0.0.K"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD EPYC\u2122 9004 Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Genoa PI 1.0.0.D"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD EPYC\u2122 7003 Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Milan PI 1.0.0.E"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 3000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4PI  1.0.0.C"
            },
            {
              "status": "unaffected",
              "version": "ComboAM4v2PI 1.2.0.D"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 5000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2PI 1.2.0.D"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 5000 Series Desktop Processor with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2PI 1.2.0.D"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 7000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.2.0.2b"
            },
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.1.0.3b"
            },
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.0.0.a"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Athlon\u2122 3000 Series Desktop Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4PI  1.0.0.C"
            },
            {
              "status": "unaffected",
              "version": "ComboAM4v2PI 1.2.0.D"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 4000 Series Desktop Processor with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2PI 1.2.0.D"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 8000 Series Processor with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.2.0.2b"
            },
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.1.0.3b"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 3000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "CastlePeakPI-SP3r3  1.0.0.D"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 3000WX Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "CastlePeakWSPI-sWRX8 1.0.0.F"
            },
            {
              "status": "unaffected",
              "version": "ChagallWSPI-sWRX8 1.0.0.9"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 5000WX- Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ChagallWSPI-sWRX8 1.0.0.9"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 7000 WX-Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "StormPeakPI-SP6  1.1.0.0h"
            },
            {
              "status": "unaffected",
              "version": "StormPeakPI-SP6  1.0.0.1j"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Athlon\u2122 3000 Series Mobile  Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PicassoPI-FP5 1.0.1.2a"
            },
            {
              "status": "unaffected",
              "version": "PollockPI-FT5 1.0.0.8a"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 3000 Series Mobile Processor with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PicassoPI-FP5 1.0.1.2a"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 4000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "RenoirPI-FP6 1.0.0.Ea"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 5000 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "CezannePI-FP6 1.0.1.1a"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 7020 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "MendocinoPI-FT6 1.0.0.7a"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 6000 Series Processor with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "RembrandtPI-FP7  1.0.0.Ba"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 7035 Series Processor with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "RembrandtPI-FP7  1.0.0.Ba"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 7040 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PhoenixPI-FP8-FP7 1.1.8.0"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 8040 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PhoenixPI-FP8-FP7 1.1.8.0"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 7000 Series Mobile Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "DragonRangeFL1PI 1.0.0.3f"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD EPYC\u2122 Embedded 3000",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "SnowyOwlPI 1.1.0.E"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD EPYC\u2122 Embedded 7002",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbRomePI-SP3 1.0.0.D"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD EPYC\u2122 Embedded 7003",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbMilanPI-SP3 1.0.0.A"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD EPYC\u2122 Embedded 9004",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbGenoaPI 1.0.0.9"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 Embedded 5000",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbAM4PI 1.0.0.7"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 Embedded 7000",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedV2KAPI-FP6 1.0.0.7"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 Embedded V2000",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP6 1.0.0.B"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 Embedded V3000",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI_FP7R2 1.0.0.C"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Ryzen\u2122 Embedded 8000",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPhoenixPI-FP7r2_1.2.0.0"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded R1000",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5 1.2.0.F"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded R2000",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedR2KPIFP5 1.0.0.5"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V1000",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5 1.2.0.F"
            }
          ]
        }
      ],
      "datePublic": "2025-02-11T17:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution."
            }
          ],
          "value": "Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-06-27T21:55:43.707Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7027.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2024-21925",
    "datePublished": "2025-02-11T20:39:03.746Z",
    "dateReserved": "2024-01-03T16:43:09.232Z",
    "dateUpdated": "2025-06-27T21:55:43.707Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.