CVE-2024-0179

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
AMDAMD Ryzen™ 3000 Series Desktop Processors—
AMDAMD Ryzen™ 5000 Series Desktop Processors—
AMDAMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics—
AMDAMD Ryzen™ 7000 Series Desktop Processors—
AMDAMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics—
AMDAMD Ryzen™ 8000 Series Processor with Radeon™ Graphics—
AMDAMD Ryzen™ Threadripper™ 3000 Series Processors—
AMDAMD Ryzen™ Threadripper™ PRO 3000WX Series Processors—
AMDAMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors—
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics—
AMDAMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics—
AMDAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 5000 Series Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 7020 Series Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 6000 Series Processor with Radeon™ Graphics—
AMDAMD Ryzen™ 7035 Series Processor with Radeon™ Graphics—
AMDAMD Ryzen™ 7040 Series Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 7000 Series Mobile Processors—
AMDAMD Ryzen™ Embedded V2000—
AMDAMD Ryzen™ Embedded V3000—
AMDAMD Ryzen™ Embedded 8000—
AMDAMD Ryzen™ Embedded V1000—
AMDAMD Ryzen™ Embedded R1000—
AMDAMD Ryzen™Embedded R2000EmbeddedR2KPIFP5 1.0.0.5
AMDAMD Ryzen™ Embedded 5000—
AMDAMD Ryzen™ Embedded 7000—

References

Timeline

Published
Feb 11, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-01814.8A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been declared as problematic. Affected by this vulnerabilityCVE-2024-01829.8A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown fCVE-2024-01834.8A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been classified as problematic. This affects an unknown partCVE-2024-01844.8A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been declared as problematic. This vulnerability affects unkCVE-2024-01858.8A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been rated as critical. This issue affects some unknown procCVE-2024-01868.1A vulnerability classified as problematic has been found in HuiRan Host Reseller System up to 2.0.0. Affected is an unknown function of the CVE-2024-01876.1The Community by PeepSo WordPress plugin before 6.3.1.2 does not sanitise and escape various parameters and generated URLs before outputtingCVE-2024-01888.1A vulnerability, which was classified as problematic, was found in RRJ Nueva Ecija Engineer Online Portal 1.0. This affects an unknown part CVE-2024-01895.4A vulnerability has been found in RRJ Nueva Ecija Engineer Online Portal 1.0 and classified as problematic. This vulnerability affects unknoCVE-2024-01905.4A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0 and classified as problematic. This issue affects some unknown proceCVE-2024-01915.3A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been classified as problematic. Affected is an unknown functCVE-2024-01925.4A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been declared as critical. Affected by this vulnerability is
CVE-2024-0179: High severity, CVSS 8.2 | Vulnix