{"id":"CVE-2024-21924","aliases":["EUVD-2024-19530","GHSA-g496-2h33-mpvw"],"status":"published","title":"SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to...","description":"SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.","severity":{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00208,"percentile":0.11077,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-250"],"published":"2025-02-11T20:18:50Z","modified":"2026-06-17T07:10:25Z","products":[{"vendor":"amd","product":"amd epyc™ 7002 processors"},{"vendor":"amd","product":"amd epyc™ embedded 7002 processors"},{"vendor":"amd","product":"amd ryzen™ threadripper™ pro 3000wx series processors"},{"vendor":"amd","product":"amd ryzen™ threadripper™ pro 5000wx- series desktop processors"},{"vendor":"amd","product":"amd ryzen™ threadripper™ pro 7000 wx-series processors"}],"references":[{"url":"https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7028.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21924"},{"url":"https://github.com/advisories/GHSA-g496-2h33-mpvw"}],"sources":{"cve":[{"id":"CVE-2024-21924","description":"SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.","status":"published","published":"2025-02-11T20:18:50.402Z","modified":"2025-02-11T20:52:32.535Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-250"],"updated_at":"2026-11-02T14:34:05.077718Z"}],"euvd":[{"id":"EUVD-2024-19530","description":"SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.","status":"published","published":"2025-02-11T20:18:50Z","modified":"2025-02-11T20:52:32Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:03:58.784175Z"}],"ghsa":[{"id":"GHSA-g496-2h33-mpvw","title":"SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to...","description":"SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.","status":"published","published":"2025-02-11T21:32:08Z","modified":"2025-02-11T21:32:14Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-250"],"updated_at":"2026-11-02T14:59:53.753427Z"}],"nvd":[{"id":"CVE-2024-21924","description":"SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.","status":"published","published":"2025-02-11T21:15:12.437Z","modified":"2026-06-17T07:10:25.31Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-250"],"updated_at":"2026-11-02T14:10:44.033107Z"}]}}