CVE-2024-21925
CVE-2024-21925 is a security vulnerability in the AmdPspP2CmboxV2 driver that can allow an attacker with elevated privileges to overwrite System Management RAM (SMRAM). This improper input validation can lead to arbitrary code execution on the affected system. With an SVRS of 30, while not critical, this vulnerability should still be addressed in a timely manner to prevent potential exploitation. The vulnerability exists due to insufficient validation of input within the driver, which allows a privileged attacker to manipulate memory regions they shouldn't have access to. Successful exploitation of CVE-2024-21925 could enable an attacker to gain complete control over the compromised system. Although the CVSS score is 0, the SVRS indicates there is still a risk associated with this vulnerability. Remediation efforts should focus on patching or updating the AmdPspP2CmboxV2 driver to the latest version provided by AMD.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.