CVE-2024-21944CWE-20

Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a…

Medium · published June 10, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
12.2
In the wild
Unconfirmed
What it is

Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to potentially overwrite guest memory resulting in loss of guest data integrity.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-06-10T21:54Z
EPSS history
Timeline
  • 10 JUN 21:54Z
    Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a…
    cvelistv5