CVE-2024-0179

8.2 highEPSS 0.2%

High (8.2). EPSS 0.2% chance of exploitation in the next 30 days.

SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution.

Severity

CVSS 3.1

8.2 high

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2025-02-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7027.html

Check your stack JSON