CNNVD-202509-960 Information

CNNVD ID

CNNVD-202509-960

CVE-2024-21947

  • CNNVD Published: 2025-09-06

Description (Chinese)

AMD Embedded Processors和AMD Client Processor都是美国超威半导体(AMD)公司的产品。AMD Embedded Processors是一系列嵌入式高性能 GPU。AMD Client Processor是面向客户端设备(如个人电脑、笔记本电脑等)的处理器。 AMD Embedded Processors和AMD Client Processor存在安全漏洞,该漏洞源于输入验证不足,可能导致任意内存覆盖和SMM级别任意代码执行。

Description (English)

AMD Embeded Products and AMD Clinic Processor are products of U.S. Superconductor Semiconductor (AMD). AMD Embeded Products is a set of embedded high-performance GPUs. AMD Clinic Processor is a processor for client-oriented devices such as personal computers, laptops, etc. There is a security gap between AMD Embededded Products and AMD Clinic Processor, which stems from inadequate input validation and may lead to arbitrary memory coverage and SMM-level code enforcement.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

超微半导体

Published

2025-09-06

Last Modified

2026-02-24

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html

Patch

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html

Share on: