CVE-2024-0179

State: Published
Severity: 8.2 High
Published: Feb 11, 2025
Updated: Feb 26, 2026
Reserved: Dec 27, 2023

Description

SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution.

Scores

CVSS	Score	Vector	Source
3.1	8.2 High	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H	AMD

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
AMD Ryzen™ 3000 Series Desktop ProcessorsAMD	ComboAM4PI 1.0.0.CNot affected ComboAM4v2PI 1.2.0.DNot affected
AMD Ryzen™ 5000 Series Desktop ProcessorsAMD	ComboAM4v2PI 1.2.0.DNot affected
AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ GraphicsAMD	ComboAM4v2PI 1.2.0.DNot affected
AMD Ryzen™ 7000 Series Desktop ProcessorsAMD	ComboAM5PI 1.2.0.2bNot affected ComboAM5PI 1.1.0.3bNot affected ComboAM5PI 1.0.0.aNot affected
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ GraphicsAMD	ComboAM4PI 1.0.0.CNot affected ComboAM4v2PI 1.2.0.DNot affected
AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ GraphicsAMD	ComboAM4v2PI 1.2.0.DNot affected
AMD Ryzen™ 8000 Series Processor with Radeon™ GraphicsAMD	ComboAM5PI 1.2.0.2bNot affected ComboAM5PI 1.1.0.3bNot affected
AMD Ryzen™ Threadripper™ 3000 Series ProcessorsAMD	CastlePeakPI-SP3r3 1.0.0.DNot affected
AMD Ryzen™ Threadripper™ PRO 3000WX Series ProcessorsAMD	CastlePeakWSPI-sWRX8 1.0.0.FNot affected
AMD Ryzen™ Threadripper™ PRO 7000 WX-Series ProcessorsAMD	StormPeakPI-SP6 1.1.0.0hNot affected StormPeakPI-SP6 1.0.0.1jNot affected
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD	PicassoPI-FP5 1.0.1.2aNot affected PollockPI-FT5 1.0.0.8aNot affected
AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ GraphicsAMD	PicassoPI-FP5 1.0.1.2aNot affected
AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ GraphicsAMD	PicassoPI-FP5 1.0.1.2aNot affected
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsAMD	PicassoPI-FP5 1.0.1.2aNot affected
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsAMD	RenoirPI-FP6 1.0.0.EaNot affected
AMD Ryzen™ 5000 Series Processors with Radeon™ GraphicsAMD	CezannePI-FP6 1.0.1.1aNot affected
AMD Ryzen™ 7020 Series Processors with Radeon™ GraphicsAMD	MendocinoPI-FT6 1.0.0.7aNot affected
AMD Ryzen™ 6000 Series Processor with Radeon™ GraphicsAMD	RembrandtPI-FP7 1.0.0.BaNot affected
AMD Ryzen™ 7035 Series Processor with Radeon™ GraphicsAMD	RembrandtPI-FP7 1.0.0.BaNot affected
AMD Ryzen™ 7040 Series Processors with Radeon™ GraphicsAMD	PhoenixPI-FP8-FP7 1.1.8.0Not affected
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ GraphicsAMD	PhoenixPI-FP8-FP7 1.1.8.0Not affected
AMD Ryzen™ 7000 Series Mobile ProcessorsAMD	DragonRangeFL1PI 1.0.0.3fNot affected
AMD Ryzen™ Embedded V2000AMD	EmbeddedPI-FP6 1.0.0.BNot affected
AMD Ryzen™ Embedded V3000AMD	EmbeddedPI_FP7R2 1.0.0.CNot affected
AMD Ryzen™ Embedded 8000AMD	EmbeddedPhoenixPI-FP7r2_1.2.0.0Not affected
AMD Ryzen™ Embedded V1000AMD	EmbeddedPI-FP5 1.2.0.FNot affected
AMD Ryzen™ Embedded R1000AMD	EmbeddedPI-FP5 1.2.0.FNot affected
AMD Ryzen™Embedded R2000AMD	EmbeddedR2KPIFP5 1.0.0.5Affected
AMD Ryzen™ Embedded 5000AMD	EmbAM4PI 1.0.0.7Not affected
AMD Ryzen™ Embedded 7000AMD	EmbeddedAM5PI 1.0.0.3Not affected

References

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7027.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.