Search

Find a vulnerability

Search criteria

    Related vulnerabilities

    BDU:2025-07174 (CVE-2024-21969)

    Vulnerability from fstec – Published: 2025-06-23 – Updated: 2025-06-23 – View on bdu.fstec.ru Fixed
    VLAI
    Title
    Уязвимость микропрограммного обеспечения процессоров AMD, связанная с использованием неинициализированного ресурса, позволяющая нарушителю выполнить произвольный код
    Summary
    Уязвимость микропрограммного обеспечения процессоров AMD связана с использованием неинициализированного ресурса. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код
    Severity
    Class
    Code vulnerability
    Status
    Confirmed by the vendor
    Exploitation
    Resource manipulation
    Incidents
    Being clarified
    Remediation
    Software update
    CWE
    • CWE-908 - Использование неинициализированного ресурса
    Impacted products
    Vendors
    Advanced Micro Devices Inc.
    Products
    AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen 5000 Series Desktop processor with Radeon graphics, AMD Ryzen 4000 Series Mobile processors with Radeon graphics, AMD Ryzen 5000 Series Mobile processor with Radeon graphics, AMD Athlon 3000 Series Mobile processor with Radeon graphics, AMD Ryzen 7000 Series Desktop Processors, AMD Ryzen 6000 Series Processors with Radeon Graphics, AMD Ryzen 7035 Series Processors with Radeon Graphics, AMD Ryzen 5000 Series Processors with Radeon Graphics, AMD Radeon RX Vega Series Graphics Cards, AMD Radeon PRO WX Vega Series Graphics Cards, AMD Athlon 3000 Series Desktop Processors with Radeon Graphics, AMD Ryzen 7020 Series Processors with Radeon Graphics, AMD Ryzen 7040 Series Processors with Radeon Graphics, AMD Ryzen 7045 Series Mobile Processors, AMD Radeon RX 5000 Series Graphics Cards, AMD Radeon RX 6000 Series Graphics Cards, AMD Radeon RX 7000 Series Graphics Cards, AMD Radeon PRO W5000 Series Graphics Cards, AMD Radeon PRO W6000 Series Graphics Cards, AMD Radeon PRO W7000 Series Graphics Cards, AMD Radeon PRO V520, AMD Radeon PRO V620, AMD Radeon Instinct MI25, AMD Radeon Instinct MI50, AMD Instinct MI100, AMD Instinct MI210, AMD Instinct MI250, AMD Instinct MI300A, AMD Instinct MI300X, AMD Radeon PRO V710, AMD Radeon VIIMD Radeon PRO VII Graphics Cards, AMD Ryzen 7030 Series Mobile Processors Barcelo, AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix, AMD Ryzen AI 300 Series Processor
    Versions
    - (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), - (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), - (AMD Ryzen 4000 Series Mobile processors with Radeon graphics), - (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), - (AMD Athlon 3000 Series Mobile processor with Radeon graphics), - (AMD Ryzen 7000 Series Desktop Processors), - (AMD Ryzen 6000 Series Processors with Radeon Graphics), - (AMD Ryzen 7035 Series Processors with Radeon Graphics), - (AMD Ryzen 5000 Series Processors with Radeon Graphics), - (AMD Radeon RX Vega Series Graphics Cards), - (AMD Radeon PRO WX Vega Series Graphics Cards), - (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), - (AMD Ryzen 7020 Series Processors with Radeon Graphics), - (AMD Ryzen 7040 Series Processors with Radeon Graphics), - (AMD Ryzen 7045 Series Mobile Processors), - (AMD Radeon RX 5000 Series Graphics Cards), - (AMD Radeon RX 6000 Series Graphics Cards), - (AMD Radeon RX 7000 Series Graphics Cards), - (AMD Radeon PRO W5000 Series Graphics Cards), - (AMD Radeon PRO W6000 Series Graphics Cards), - (AMD Radeon PRO W7000 Series Graphics Cards), - (AMD Radeon PRO V520), - (AMD Radeon PRO V620), - (AMD Radeon Instinct MI25), - (AMD Radeon Instinct MI50), - (AMD Instinct MI100), - (AMD Instinct MI210), - (AMD Instinct MI250), - (AMD Instinct MI300A), - (AMD Instinct MI300X), - (AMD Radeon PRO V710), - (AMD Radeon VIIMD Radeon PRO VII Graphics Cards), - (AMD Ryzen 7030 Series Mobile Processors Barcelo), - (AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix), - (AMD Ryzen AI 300 Series Processor)
    Product types
    Firmware, Микропрограммный код аппаратных компонентов компьютера, Appliance software
    Mitigations
    Использование рекомендаций производителя: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6013.html

    {
      "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:N/A:C",
      "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
      "CVSS 4.0": null,
      "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
      "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
      "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Advanced Micro Devices Inc.",
      "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), - (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), - (AMD Ryzen 4000 Series Mobile processors with Radeon graphics), - (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), - (AMD Athlon 3000 Series Mobile processor with Radeon graphics), - (AMD Ryzen 7000 Series Desktop Processors), - (AMD Ryzen 6000 Series Processors with Radeon Graphics), - (AMD Ryzen 7035 Series Processors with Radeon Graphics), - (AMD Ryzen 5000 Series Processors with Radeon Graphics), - (AMD Radeon RX Vega Series Graphics Cards), - (AMD Radeon PRO WX Vega Series Graphics Cards), - (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), - (AMD Ryzen 7020 Series Processors with Radeon Graphics), - (AMD Ryzen 7040 Series Processors with Radeon Graphics), - (AMD Ryzen 7045 Series Mobile Processors), - (AMD Radeon RX 5000 Series Graphics Cards), - (AMD Radeon RX 6000 Series Graphics Cards), - (AMD Radeon RX 7000 Series Graphics Cards), - (AMD Radeon PRO W5000 Series Graphics Cards), - (AMD Radeon PRO W6000 Series Graphics Cards), - (AMD Radeon PRO W7000 Series Graphics Cards), - (AMD Radeon PRO V520), - (AMD Radeon PRO V620), - (AMD Radeon Instinct MI25), - (AMD Radeon Instinct MI50), - (AMD Instinct MI100), - (AMD Instinct MI210), - (AMD Instinct MI250), - (AMD Instinct MI300A), - (AMD Instinct MI300X), - (AMD Radeon PRO V710), - (AMD Radeon VIIMD Radeon PRO VII Graphics Cards), - (AMD Ryzen 7030 Series Mobile Processors Barcelo), - (AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix), - (AMD Ryzen AI 300 Series Processor)",
      "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-6013.html",
      "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "11.02.2025",
      "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.06.2025",
      "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "23.06.2025",
      "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-07174",
      "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-21969, AMD-SB-6013",
      "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
      "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
      "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen 5000 Series Desktop processor with Radeon graphics, AMD Ryzen 4000 Series Mobile processors with Radeon graphics, AMD Ryzen 5000 Series Mobile processor with Radeon graphics, AMD Athlon 3000 Series Mobile processor with Radeon graphics, AMD Ryzen 7000 Series Desktop Processors, AMD Ryzen 6000 Series Processors with Radeon Graphics, AMD Ryzen 7035 Series Processors with Radeon Graphics, AMD Ryzen 5000 Series Processors with Radeon Graphics, AMD Radeon RX Vega Series Graphics Cards, AMD Radeon PRO WX Vega Series Graphics Cards, AMD Athlon 3000 Series Desktop Processors with Radeon Graphics, AMD Ryzen 7020 Series Processors with Radeon Graphics, AMD Ryzen 7040 Series Processors with Radeon Graphics, AMD Ryzen 7045 Series Mobile Processors, AMD Radeon RX 5000 Series Graphics Cards, AMD Radeon RX 6000 Series Graphics Cards, AMD Radeon RX 7000 Series Graphics Cards, AMD Radeon PRO W5000 Series Graphics Cards, AMD Radeon PRO W6000 Series Graphics Cards, AMD Radeon PRO W7000 Series Graphics Cards, AMD Radeon PRO V520, AMD Radeon PRO V620, AMD Radeon Instinct MI25, AMD Radeon Instinct MI50, AMD Instinct MI100, AMD Instinct MI210, AMD Instinct MI250, AMD Instinct MI300A, AMD Instinct MI300X, AMD Radeon PRO V710, AMD Radeon VIIMD Radeon PRO VII Graphics Cards, AMD Ryzen 7030 Series Mobile Processors Barcelo, AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix, AMD Ryzen AI 300 Series Processor",
      "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
      "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
      "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
      "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430 (CWE-908)",
      "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
      "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
      "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
      "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
      "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
      "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
      "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
      "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6013.html",
      "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
      "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
      "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-908",
      "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,2)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,1)"
    }