cvedb.io
CVE-2024-21944
MEDIUM · CVSS 5.3
EPSS exploitation probability: 0%
Published 2026-06-10T23:16:44.950 · Last modified 2026-07-23T09:10:00.113

Summary

Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to potentially overwrite guest memory resulting in loss of guest data integrity.

Does this affect you?

Add your gear to cvedb and we'll alert you only when a vendor you run ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.