Home

Description

Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to potentially overwrite guest memory resulting in loss of guest data integrity.

PUBLISHED Reserved 2024-01-03 | Published 2026-06-10 | Updated 2026-06-10 | Assigner AMD




MEDIUM: 5.3CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N

Problem types

CWE-20 Improper input validation

Product status

Default status
affected

Milan PI 1.0.0.D
unaffected

SEV FW 1.55.22 (hex 1.37.16)
unaffected

Default status
affected

Genoa PI 1.0.0.D
unaffected

SEV FW 1.55.38 (hex 1.37.26)
unaffected

References

www.amd.com/...es/product-security/bulletin/amd-sb-3015.html

cve.org (CVE-2024-21944)

nvd.nist.gov (CVE-2024-21944)

Download JSON