CVE-2024-21937

Summary

CVE-2024-21937 is a newly disclosed vulnerability affecting the AMD HIP SDK. The issue stems from incorrect default permissions within the installation directory, making it possible for an attacker to escalate privileges and potentially execute arbitrary code. This could lead to serious consequences, including unauthorized access and data theft. To mitigate the risk, it is recommended that users immediately review and adjust the permissions within the AMD HIP SDK installation directory to restrict access to authorized users only. Additionally, applying the latest security patches and updates to the AMD HIP SDK is crucial to protect against potential exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.