{"id":"CVE-2024-21978","aliases":["EUVD-2024-19584","GHSA-rf8m-mggj-3g74"],"status":"published","title":"Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite...","description":"Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.","severity":{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00493,"percentile":0.4279,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-20"],"published":"2024-08-05T16:05:34Z","modified":"2026-06-17T07:10:28Z","exploits":[{"source":"pocgithub","id":"Freax13/cve-2024-21978-poc","title":"Freax13/cve-2024-21978-poc","date":"2024-01-07","url":"https://github.com/Freax13/cve-2024-21978-poc"}],"products":[{"vendor":"amd","product":"3rd gen amd epyc™ processors"},{"vendor":"amd","product":"4th gen amd epyc™ processors"},{"vendor":"amd","product":"amd epyc™ embedded 7003"},{"vendor":"amd","product":"amd epyc™ embedded 9003"},{"vendor":"amd","product":"epyc_7003_firmware"},{"vendor":"amd","product":"epyc_7203_firmware"},{"vendor":"amd","product":"epyc_7203p_firmware"},{"vendor":"amd","product":"epyc_72f3_firmware"},{"vendor":"amd","product":"epyc_7303_firmware"},{"vendor":"amd","product":"epyc_7303p_firmware"},{"vendor":"amd","product":"epyc_7313_firmware"},{"vendor":"amd","product":"epyc_7313p_firmware"},{"vendor":"amd","product":"epyc_7343_firmware"},{"vendor":"amd","product":"epyc_7373x_firmware"},{"vendor":"amd","product":"epyc_73f3_firmware"},{"vendor":"amd","product":"epyc_7413_firmware"},{"vendor":"amd","product":"epyc_7443_firmware"},{"vendor":"amd","product":"epyc_7443p_firmware"},{"vendor":"amd","product":"epyc_7453_firmware"},{"vendor":"amd","product":"epyc_7473x_firmware"},{"vendor":"amd","product":"epyc_74f3_firmware"},{"vendor":"amd","product":"epyc_7513_firmware"},{"vendor":"amd","product":"epyc_7543_firmware"},{"vendor":"amd","product":"epyc_7543p_firmware"},{"vendor":"amd","product":"epyc_7573x_firmware"},{"vendor":"amd","product":"epyc_75f3_firmware"},{"vendor":"amd","product":"epyc_7643_firmware"},{"vendor":"amd","product":"epyc_7643p_firmware"},{"vendor":"amd","product":"epyc_7663_firmware"},{"vendor":"amd","product":"epyc_7663p_firmware"},{"vendor":"amd","product":"epyc_7713_firmware"},{"vendor":"amd","product":"epyc_7713p_firmware"},{"vendor":"amd","product":"epyc_7763_firmware"},{"vendor":"amd","product":"epyc_7773x_firmware"},{"vendor":"amd","product":"epyc_8024p_firmware"},{"vendor":"amd","product":"epyc_8024pn_firmware"},{"vendor":"amd","product":"epyc_8124p_firmware"},{"vendor":"amd","product":"epyc_8124pn_firmware"},{"vendor":"amd","product":"epyc_8224p_firmware"},{"vendor":"amd","product":"epyc_8224pn_firmware"},{"vendor":"amd","product":"epyc_8324p_firmware"},{"vendor":"amd","product":"epyc_8324pn_firmware"},{"vendor":"amd","product":"epyc_8434p_firmware"},{"vendor":"amd","product":"epyc_8434pn_firmware"},{"vendor":"amd","product":"epyc_8534p_firmware"},{"vendor":"amd","product":"epyc_8534pn_firmware"},{"vendor":"amd","product":"epyc_9003_firmware"},{"vendor":"amd","product":"epyc_9124_firmware"},{"vendor":"amd","product":"epyc_9174f_firmware"},{"vendor":"amd","product":"epyc_9184x_firmware"},{"vendor":"amd","product":"epyc_9224_firmware"},{"vendor":"amd","product":"epyc_9254_firmware"},{"vendor":"amd","product":"epyc_9274f_firmware"},{"vendor":"amd","product":"epyc_9334_firmware"},{"vendor":"amd","product":"epyc_9354_firmware"},{"vendor":"amd","product":"epyc_9354p_firmware"},{"vendor":"amd","product":"epyc_9374f_firmware"},{"vendor":"amd","product":"epyc_9384x_firmware"},{"vendor":"amd","product":"epyc_9454_firmware"},{"vendor":"amd","product":"epyc_9454p_firmware"},{"vendor":"amd","product":"epyc_9474f_firmware"},{"vendor":"amd","product":"epyc_9534_firmware"},{"vendor":"amd","product":"epyc_9554_firmware"},{"vendor":"amd","product":"epyc_9554p_firmware"},{"vendor":"amd","product":"epyc_9634_firmware"},{"vendor":"amd","product":"epyc_9654_firmware"},{"vendor":"amd","product":"epyc_9654p_firmware"},{"vendor":"amd","product":"epyc_9684x_firmware"},{"vendor":"amd","product":"epyc_9734_firmware"},{"vendor":"amd","product":"epyc_9754_firmware"},{"vendor":"amd","product":"epyc_9754s_firmware"},{"vendor":"amd","product":"epyc_embedded_7313_firmware"},{"vendor":"amd","product":"epyc_embedded_7313p_firmware"},{"vendor":"amd","product":"epyc_embedded_7413_firmware"},{"vendor":"amd","product":"epyc_embedded_7443_firmware"},{"vendor":"amd","product":"epyc_embedded_7443p_firmware"},{"vendor":"amd","product":"epyc_embedded_7543_firmware"},{"vendor":"amd","product":"epyc_embedded_7543p_firmware"},{"vendor":"amd","product":"epyc_embedded_7643_firmware"},{"vendor":"amd","product":"epyc_embedded_7713_firmware"},{"vendor":"amd","product":"epyc_embedded_7713p_firmware"},{"vendor":"amd","product":"epyc_embedded_9124_firmware"},{"vendor":"amd","product":"epyc_embedded_9254_firmware"},{"vendor":"amd","product":"epyc_embedded_9354_firmware"},{"vendor":"amd","product":"epyc_embedded_9354p_firmware"},{"vendor":"amd","product":"epyc_embedded_9454_firmware"},{"vendor":"amd","product":"epyc_embedded_9454p_firmware"},{"vendor":"amd","product":"epyc_embedded_9534_firmware"},{"vendor":"amd","product":"epyc_embedded_9554_firmware"},{"vendor":"amd","product":"epyc_embedded_9554p_firmware"},{"vendor":"amd","product":"epyc_embedded_9654_firmware"},{"vendor":"amd","product":"epyc_embedded_9654p_firmware"}],"references":[{"url":"https://https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3011.html","tags":["vendor-advisory","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21978"},{"url":"https://github.com/advisories/GHSA-rf8m-mggj-3g74"}],"sources":{"cve":[{"id":"CVE-2024-21978","description":"Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.","status":"published","published":"2024-08-05T16:05:34.019Z","modified":"2024-08-05T17:36:02.731Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:34:04.681315Z"}],"euvd":[{"id":"EUVD-2024-19584","description":"Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.","status":"published","published":"2024-08-05T16:05:34Z","modified":"2024-08-05T17:36:02Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium"}],"updated_at":"2026-11-03T02:23:26.143318Z"}],"ghsa":[{"id":"GHSA-rf8m-mggj-3g74","title":"Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite...","description":"Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.","status":"published","published":"2024-08-05T18:31:43Z","modified":"2024-08-05T18:31:49Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:57:51.842398Z"}],"nvd":[{"id":"CVE-2024-21978","description":"Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.","status":"published","published":"2024-08-05T16:15:35.193Z","modified":"2026-06-17T07:10:28.82Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:10:17.832118Z"}]}}