CVE-2024-21980

Severity Score

7.9

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track*

*SSVC

Descriptions

MITRE

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity.

*Credits: N/A

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:Track*

Exploitation

None

Automatable

Tech. Impact

Total

* Organization's Worst-case Scenario

Timeline

2024-01-03 CVE Reserved
2024-08-05 CVE Published
2024-08-05 CVE Updated
2024-09-13 First Exploit
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (2)

URL	Tag	Source

URL	Date	SRC
https://github.com/Freax13/cve-2024-21980-poc	2024-09-13

URL	Date	SRC

URL	Date	SRC
https://https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3011.html	2024-08-05

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Amd Search vendor "Amd"		Epyc 7003 Firmware Search vendor "Amd" for product "Epyc 7003 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7203 Firmware Search vendor "Amd" for product "Epyc 7203 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7203p Firmware Search vendor "Amd" for product "Epyc 7203p Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 72f3 Firmware Search vendor "Amd" for product "Epyc 72f3 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7303 Firmware Search vendor "Amd" for product "Epyc 7303 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7303p Firmware Search vendor "Amd" for product "Epyc 7303p Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7313p Firmware Search vendor "Amd" for product "Epyc 7313p Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7343 Firmware Search vendor "Amd" for product "Epyc 7343 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7373x Firmware Search vendor "Amd" for product "Epyc 7373x Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7413 Firmware Search vendor "Amd" for product "Epyc 7413 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7443 Firmware Search vendor "Amd" for product "Epyc 7443 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7443p Firmware Search vendor "Amd" for product "Epyc 7443p Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7453 Firmware Search vendor "Amd" for product "Epyc 7453 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7473x Firmware Search vendor "Amd" for product "Epyc 7473x Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 74f3 Firmware Search vendor "Amd" for product "Epyc 74f3 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7513 Firmware Search vendor "Amd" for product "Epyc 7513 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7543 Firmware Search vendor "Amd" for product "Epyc 7543 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7573x Firmware Search vendor "Amd" for product "Epyc 7573x Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 75f3 Firmware Search vendor "Amd" for product "Epyc 75f3 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7643 Firmware Search vendor "Amd" for product "Epyc 7643 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7643p Firmware Search vendor "Amd" for product "Epyc 7643p Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7663 Firmware Search vendor "Amd" for product "Epyc 7663 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7663p Firmware Search vendor "Amd" for product "Epyc 7663p Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7713 Firmware Search vendor "Amd" for product "Epyc 7713 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7713p Firmware Search vendor "Amd" for product "Epyc 7713p Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7763 Firmware Search vendor "Amd" for product "Epyc 7763 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 7773x Firmware Search vendor "Amd" for product "Epyc 7773x Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 8024p Firmware Search vendor "Amd" for product "Epyc 8024p Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 8024pn Firmware Search vendor "Amd" for product "Epyc 8024pn Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 8124p Firmware Search vendor "Amd" for product "Epyc 8124p Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 8124pn Firmware Search vendor "Amd" for product "Epyc 8124pn Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 8224p Firmware Search vendor "Amd" for product "Epyc 8224p Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 8224pn Firmware Search vendor "Amd" for product "Epyc 8224pn Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 8324p Firmware Search vendor "Amd" for product "Epyc 8324p Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 8324pn Firmware Search vendor "Amd" for product "Epyc 8324pn Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 8434p Firmware Search vendor "Amd" for product "Epyc 8434p Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 8434pn Firmware Search vendor "Amd" for product "Epyc 8434pn Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 8534p Firmware Search vendor "Amd" for product "Epyc 8534p Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 8534pn Firmware Search vendor "Amd" for product "Epyc 8534pn Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9003 Firmware Search vendor "Amd" for product "Epyc 9003 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9124 Firmware Search vendor "Amd" for product "Epyc 9124 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9174f Firmware Search vendor "Amd" for product "Epyc 9174f Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9184x Firmware Search vendor "Amd" for product "Epyc 9184x Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9224 Firmware Search vendor "Amd" for product "Epyc 9224 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9254 Firmware Search vendor "Amd" for product "Epyc 9254 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9274f Firmware Search vendor "Amd" for product "Epyc 9274f Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9334 Firmware Search vendor "Amd" for product "Epyc 9334 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9354 Firmware Search vendor "Amd" for product "Epyc 9354 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9354p Firmware Search vendor "Amd" for product "Epyc 9354p Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9374f Firmware Search vendor "Amd" for product "Epyc 9374f Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9384x Firmware Search vendor "Amd" for product "Epyc 9384x Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9454 Firmware Search vendor "Amd" for product "Epyc 9454 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9454p Firmware Search vendor "Amd" for product "Epyc 9454p Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9474f Firmware Search vendor "Amd" for product "Epyc 9474f Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9534 Firmware Search vendor "Amd" for product "Epyc 9534 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9554 Firmware Search vendor "Amd" for product "Epyc 9554 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9554p Firmware Search vendor "Amd" for product "Epyc 9554p Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9634 Firmware Search vendor "Amd" for product "Epyc 9634 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9654 Firmware Search vendor "Amd" for product "Epyc 9654 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9654p Firmware Search vendor "Amd" for product "Epyc 9654p Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9684x Firmware Search vendor "Amd" for product "Epyc 9684x Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9734 Firmware Search vendor "Amd" for product "Epyc 9734 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9754 Firmware Search vendor "Amd" for product "Epyc 9754 Firmware"				*		-		Affected
Amd Search vendor "Amd"		Epyc 9754s Firmware Search vendor "Amd" for product "Epyc 9754s Firmware"				*		-		Affected