Skip to content
OpenAdvisories
High · 7.3 CVE-2024-21937 EUVD-2024-19543GHSA-cmh5-78pc-x57w

Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially…

Published Nov 12, 2024 · Updated Nov 14, 2024 · Assigned by AMD

Vendor: AMD Product: AMD Software: Adrenalin Edition Product: AMD Software: Cloud Edition Product: AMD Software: PRO Edition

Description

Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

Affected products

VendorProductAffectedFixed
AMD AMD Software: PRO Edition < 24.10.16, < 24.Q2 (24.10.20) 24.10.16
AMD AMD Software: Adrenalin Edition < 24.6.1 (24.10.21.01) 24.6.1 (24.10.21.01)
AMD AMD Software: Cloud Edition < 24.7.1 24.7.1

References