CVE-2024-21937

published 2024-11-12

CVE-2024-21937: Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in…

Priority P3 42 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
amd	amd_software_adrenalin_edition	< 24.6.1 (24.10.21.01)	24.6.1 (24.10.21.01)
amd	amd_software_cloud_edition	< 24.7.1	24.7.1
amd	amd_software_pro_edition	< 24.10.16	24.10.16
amd	amd_software_pro_edition	< 24.Q2 (24.10.20)	24.Q2 (24.10.20)
amd	radeon_software	< 24.6.1	24.6.1
amd	radeon_software	< 24.7.1	24.7.1
amd	radeon_software	< 24.q2	24.q2
amd	radeon_software_for_hip	< 24.10.16	24.10.16

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-276