Riskcovery

CVE-2024-21970

State
Published
Severity
4.4 Medium
Published
Sep 6, 2025
Updated
Sep 8, 2025
Reserved
Jan 3, 2024

Read the record on cve.org

Description

Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potentially leading to a loss of integrity.

Scores

CVSSScoreVectorSource
3.14.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:NAMD

Weaknesses

  • CWE-129 Improper Validation of Array Index

Affected Products

ProductVersions
AMD Ryzen™ Threadripper™ 3000 ProcessorsAMD
  • CastlePeakPI-SP3r3 1.0.0.CNot affected
AMD Ryzen™ Threadripper™ PRO 5000 WX-Series ProcessorsAMD
  • ChagallWSPI-sWRX8-1.0.0.9Not affected
AMD Ryzen™ Threadripper™ PRO 3000 WX-Series ProcessorsAMD
  • CastlePeakWSPI-sWRX8 1.0.0.ENot affected
  • ChagallWSPI-sWRX8-1.0.0.9Not affected
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD
  • Picasso-FP5 1.0.1.2Not affected
Renoir Cezanne Raven Ridge Raven Ridge 2 Picasso Summit Pinnacle Ridge Matisse VermeerAMD
  • ComboAM4v2PI_1.2.0.DNot affected
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ GraphicsAMD
  • ComboAM4PI_1.0.0.FNot affected
AMD Ryzen™ 8000 Series Desktop ProcessorsAMD
  • ComboAM5 1.2.0.0Not affected
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsAMD
  • RenoirPI-FP6_1.0.0.ENot affected
AMD Ryzen™ 6000 Series Processors with Radeon™ GraphicsAMD
  • RembrandtPI-FP7_1.0.0.BNot affected
AMD Ryzen™ 7020 Series Processors with Radeon™ GraphicsAMD
  • MendocinoPI-FT6_1.0.0.6Not affected
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ GraphicsAMD
  • DragonRangeFL1 1.0.0.3dNot affected
AMD Ryzen™ 7035 Series Processors with Radeon™ GraphicsAMD
  • RembrandtPI-FP7_1.0.0.BNot affected
AMD Ryzen™ 7000 Series Desktop ProcessorsAMD
  • ComboAM5 1.2.0.0Not affected
AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ GraphicsAMD
  • CezannePI-FP6_1.0.1.1Not affected
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsAMD
  • CezannePI-FP6_1.0.1.1Not affected
AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD
  • Picasso-FP5 1.0.1.2Not affected
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD
  • Picasso-FP5 1.0.1.2Not affected
AMD Ryzen™ 3000 Series Desktop ProcessorsAMD
  • ComboAM4PI_1.0.0.FNot affected
AMD Ryzen™ 5000 Series Desktop ProcessorsAMD
  • ComboAM4PI_1.0.0.FNot affected
AMD Ryzen™ Embedded R1000 Series ProcessorsAMD
  • EmbeddedPI-FP5 1.2.0.ENot affected
AMD Ryzen™ Embedded R2000 Series ProcessorsAMD
  • EmbeddedR2KPI-FP5 1005Not affected
AMD Ryzen™ Embedded 7000 Series ProcessorsAMD
  • EmbeddedAM5PI 1.0.0.3Not affected
AMD Ryzen™ Embedded 5000 Series ProcessorsAMD
  • EmbAM4PI 1.0.0.7Not affected
AMD Ryzen™ Embedded V1000 Series ProcessorsAMD
  • EmbeddedPI-FP5 1.2.0.ENot affected
AMD Ryzen™ Embedded V2000 Series ProcessorsAMD
  • EmbeddedPI-FP6_1.0.0.BNot affected
AMD Ryzen™ Embedded V3000 Series ProcessorsAMD
  • Embedded-PI_FP7r2 100ANot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.