cbcvebase.
CVE-2024-21978
published 2024-08-05

CVE-2024-21978: Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data…

PriorityP336high7.9CVSS 3.1
AVLACLPRHUINSCCHIHAN
EPSS
0.49%
39.1th percentile
Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.

Affected

90 ranges· showing 25
VendorProductVersion rangeFixed in
amd3rd_gen_amd_epyc_processors>= various < MilanPI 1.0.0.DMilanPI 1.0.0.D
amd4th_gen_amd_epyc_processors>= various < GenoaPI 1.0.0.CGenoaPI 1.0.0.C
amdamd_epyc_embedded_7003>= various < EmbMilanPI-SP3 1.0.0.9EmbMilanPI-SP3 1.0.0.9
amdamd_epyc_embedded_9003>= various < EmbGenoaPI-SP5 1.0.0.7EmbGenoaPI-SP5 1.0.0.7
amdepyc_7203_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_7203p_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_72f3_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_7303_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_7303p_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_7313_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_7313p_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_7343_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_7373x_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_73f3_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_7413_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_7443_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_7443p_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_7453_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_7473x_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_74f3_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_7513_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_7543_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_7543p_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_7573x_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d
amdepyc_75f3_firmware< milanpi_1.0.0.dmilanpi_1.0.0.d

CVSS provenance

nvdv3.17.9HIGHCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
vendor_redhat6.0MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.