CVE-2024-56161 HIGH

CVE-2024-56161

Weakness CWE-347

Published February 3, 2025

Last update April 2, 2025

View on NVD All CVEs

CVSS base score

7.2/10

Attack vector Local

Attack complexity High

Privileges required High

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

What the vulnerability does

01Description

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.

Key dates

02Disclosure timeline

February 3, 2025 CVE published

April 2, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-56161 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/347.html

Related vulnerabilities

04Related CVE

CVE-2026-44714 bitcoinj: ScriptExecution P2PKH/P2WPKH Verification Bypass CVE-2026-44497 ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer CVE-2026-41301 OpenClaw 2026.3.22 < 2026.3.31 - Forged Nostr DM Pairing State Creation via Signature Verification Bypass CVE-2026-50634 Apache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entry CVE-2026-0265 PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled