CVE-2024-21960

Published: May 13, 2025Modified: May 13, 2025

7.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.3 / Impact: 5.9

Source: psirt@amd.com (Secondary)

Description

Incorrect default permissions in the AMD Optimizing CPU Libraries (AOCL) installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (1)

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9014.html

Source: psirt@amd.com

Timeline

No history available yet.