Home

Description

Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potentially leading to a loss of integrity.

PUBLISHED Reserved 2024-01-03 | Published 2025-09-06 | Updated 2025-09-08 | Assigner AMD




MEDIUM: 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Problem types

CWE-129 Improper Validation of Array Index

Product status

Default status
affected

CastlePeakPI-SP3r3 1.0.0.C
unaffected

Default status
affected

ChagallWSPI-sWRX8-1.0.0.9
unaffected

Default status
affected

CastlePeakWSPI-sWRX8 1.0.0.E
unaffected

ChagallWSPI-sWRX8-1.0.0.9
unaffected

Default status
affected

Picasso-FP5 1.0.1.2
unaffected

Default status
affected

ComboAM4v2PI_1.2.0.D
unaffected

Default status
affected

ComboAM4PI_1.0.0.F
unaffected

Default status
affected

ComboAM5 1.2.0.0
unaffected

Default status
affected

RenoirPI-FP6_1.0.0.E
unaffected

Default status
affected

RembrandtPI-FP7_1.0.0.B
unaffected

Default status
affected

MendocinoPI-FT6_1.0.0.6
unaffected

Default status
affected

DragonRangeFL1 1.0.0.3d
unaffected

Default status
affected

RembrandtPI-FP7_1.0.0.B
unaffected

Default status
affected

ComboAM5 1.2.0.0
unaffected

Default status
affected

CezannePI-FP6_1.0.1.1
unaffected

Default status
affected

CezannePI-FP6_1.0.1.1
unaffected

Default status
affected

Picasso-FP5 1.0.1.2
unaffected

Default status
affected

Picasso-FP5 1.0.1.2
unaffected

Default status
affected

ComboAM4PI_1.0.0.F
unaffected

Default status
affected

ComboAM4PI_1.0.0.F
unaffected

Default status
affected

EmbeddedPI-FP5 1.2.0.E
unaffected

Default status
affected

EmbeddedR2KPI-FP5 1005
unaffected

Default status
affected

EmbeddedAM5PI 1.0.0.3
unaffected

Default status
affected

EmbAM4PI 1.0.0.7
unaffected

Default status
affected

EmbeddedPI-FP5 1.2.0.E
unaffected

Default status
affected

EmbeddedPI-FP6_1.0.0.B
unaffected

Default status
affected

Embedded-PI_FP7r2 100A
unaffected

References

www.amd.com/...es/product-security/bulletin/AMD-SB-4012.html

www.amd.com/...es/product-security/bulletin/AMD-SB-5007.html

cve.org (CVE-2024-21970)

nvd.nist.gov (CVE-2024-21970)

Download JSON