CVE-2024-21923: High severity AMD StoreMI vulnerability

Published Nov 23, 2025

Updated

Incorrect default permissions in AMD StoreMI™ could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

Affected Software

1 affected component

AMD StoreMI

Event History

Nov 23, 2025

CVE Published

via MITRE·04:27 PM

Data Sourced

via MITRE·04:27 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker needs local access with low privileges and requires user interaction. The vulnerability is not described as remotely exploitable.

What is the potential impact if exploitation succeeds?

Successful exploitation could allow privilege escalation and potentially arbitrary code execution. The stated impact includes compromise of confidentiality, integrity, and availability.

Is the default configuration affected?

The issue is attributed to incorrect default permissions in AMD StoreMI, indicating that affected default permission settings are relevant to exploitation.

CVE-2024-21923: High severity AMD StoreMI vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Is the default configuration affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Is the default configuration affected?