HIGH🇵🇱 Wersja polska

CVE-2024-21937

CVSS 7.3v3.1pub. 2024-11-12upd. 2024-11-27

Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

  • Amd Radeon Software

    APP
    Amd
    < 24.6.1< 24.7.1< 24.q2

  • Amd Radeon Software For Hip

    APP
    Amd
    < 24.10.16
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCELPE
CWE
References

Related vulnerabilities

CVE-2023-20586CRITICAL9.8ten sam produkt

A potential vulnerability was reported in Radeon™ Software Crimson ReLive Edition which may allow escalation ...

CVE-2024-36333HIGH7.0ten sam produkt

A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalati...

CVE-2023-20548HIGH7.1ten sam produkt

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker ...

CVE-2023-31324HIGH7.1ten sam produkt

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker ...

CVE-2023-31320HIGH7.5ten sam produkt

Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the dis...