CVE-2024-21937: High severity amd radeon software for hip vulnerability
Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21937?
CVE-2024-21937 has a high severity due to its potential for privilege escalation and arbitrary code execution.
How do I fix CVE-2024-21937?
To fix CVE-2024-21937, apply the latest updates from AMD for the affected Radeon Software versions.
What are the affected software versions for CVE-2024-21937?
CVE-2024-21937 affects AMD Radeon Software versions up to 24.6.1 for Adrenalin, 24.7.1 for Cloud, and 24.q2 for Pro, among others.
Can CVE-2024-21937 be exploited remotely?
CVE-2024-21937 primarily requires local access for exploitation, as it involves incorrect default permissions.
What types of attacks can occur due to CVE-2024-21937?
Exploitation of CVE-2024-21937 can lead to privilege escalation and the execution of arbitrary code on the affected system.