High severity7.5NVD Advisory· Published Sep 6, 2025· Updated Jun 17, 2026

CVE-2024-21947

Description

Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially resulting in arbitrary code execution at the SMM level.

Affected products

AMD/System Management Modellm-create

Patches

Vulnerability mechanics

References

www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.htmlnvd
www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000