CVE-2024-21963 | AMD EPYC 4004 Processors IOMMU out-of-bounds

A vulnerability categorized as very critical has been discovered in AMD EPYC 4004 Processors, EPYC 4005 Processors, EPYC 7001 Processors, EPYC 7002 Processors, EPYC 7003 Processors, EPYC 8004 Processors, EPYC 8005 Processors, EPYC 9004 Processors, EPYC 9005 Processors, EPYC Embedded 3000 Processors, EPYC Embedded 7002 Processors, EPYC Embedded 7003 Processors, EPYC Embedded 8004 Processors, EPYC Embedded 9004 Processors, EPYC Embedded 9005 Processors, Ryzen 2000 Mobile Processors, Ryzen 4000 Desktop Processors, Ryzen 4000 Mobile Processors with Radeon Graphics, Ryzen 5000 Desktop Processors, Ryzen 5000 Mobile Processors with Radeon Graphics, Ryzen 6000 Processors with Radeon Graphics, Ryzen 7000 Desktop Processors, Ryzen 7020 Processors with Radeon Graphics, Ryzen 7040 Mobile Processors with Radeon Graphics, Ryzen 7045 Mobile Processors with Radeon Graphics, Ryzen 8000 Desktop Processors, Ryzen 8040 Mobile Processors with Radeon Graphics, Ryzen 9000 Desktop Processors, Ryzen 9000HX Processors, Ryzen AI 300 Processors, Ryzen AI Max 300 Processors, Ryzen Embedded 5000 Processors, Ryzen Embedded 7000 Processors, Ryzen Embedded 8000 Processors, Ryzen Embedded V2000 Processors, Ryzen Embedded V2000A Processors, Ryzen Embedded V3000 Processors, Ryzen Embedded V3000 EDKII Processors, Ryzen Threadripper 7000 WX-Series Processors, Ryzen Threadripper 9000, Ryzen Threadripper PRO 3000 WX-Series Processors, Ryzen Threadripper PRO 5000 WX-Series Processors, Ryzen Threadripper PRO 7000 WX-Series Processors, Ryzen Z1 Processors and Ryzen Z2 Processors. This impacts an unknown function of the component IOMMU. The manipulation results in out-of-bounds read.

This vulnerability is known as CVE-2024-21963. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More