CVE-2024-21937

Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

Score

CVSS 3.1 7.8 High

Status

Analyzed - psirt@amd.com

Published

2024-11-12

Last modified

2024-11-14

Weaknesses

CWE-276

Affected products

• Amd Software Adrenalin Edition (Amd)
• Amd Software Cloud Edition (Amd)
• Amd Software Pro Edition (Amd)
• Radeon Software (Amd)
• Radeon Software For Hip (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6015.html