CNNVD-202509-962 Information

CNNVD ID

CNNVD-202509-962

CVE-2024-21970

  • CNNVD Published: 2025-09-06

Description (Chinese)

AMD Embedded Processors和AMD Client Processor都是美国超威半导体(AMD)公司的产品。AMD Embedded Processors是一系列嵌入式高性能 GPU。AMD Client Processor是面向客户端设备(如个人电脑、笔记本电脑等)的处理器。 AMD Embedded Processors和AMD Client Processor存在安全漏洞,该漏洞源于数组索引验证不足,可能导致AGESA内存损坏和完整性损失。

Description (English)

AMD Embeded Products and AMD Clinic Processor are products of U.S. Superconductor Semiconductor (AMD). AMD Embeded Products is a set of embedded high-performance GPUs. AMD Clinic Processor is a processor for client-oriented devices such as personal computers, laptops, etc. AMD Embedded Products and AMD Clinic Processor had a security loophole, which stemmed from the inadequate validation of the array index, which could result in damage to the AGESA memory and loss of integrity.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

超微半导体

Published

2025-09-06

Last Modified

2026-02-24

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html

Patch

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html

Share on: