CVE-2024-0179
CVSS 3.1 Score 8.2 of 10 (high)
Details
Summary
CVE-2024-0179 is a newly identified vulnerability affecting the AmdCpmDisplayFeatureSMM driver. This issue permits locally authenticated attackers to manipulate the SMM Callout function, leading to SMRAM overwrite. The consequence of this vulnerability is the potential execution of arbitrary code, posing a significant risk to system security. The vulnerability is situated within the driver responsible for managing display features using System Management Mode (SMM). Mitigation measures include updating the affected driver and implementing access controls to restrict unauthorized access.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.