8.4
High
CVE-2024-36326 Missing authorization in AMD RomArmor could allow an attacker to bypass ROMArmor protections during system resume from a…
Description
Missing authorization in AMD RomArmor could allow an attacker to bypass ROMArmor protections during system resume from a standby state, potentially resulting in a loss of confidentiality and integrity.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ AI 300 Series Processors | Versions not published |
References
- www.amd.com www.amd.com
Timeline
- Published
- Last modified
Other CVEs of AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
The 38 CVEs of AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics →
CVE-2026-43603
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of…
6.9
Medium
CVE-2024-36343
Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to…
4.6
Medium
CVE-2025-0044
An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially…
4.8
Medium
CVE-2025-48516
Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with…
6.9
Medium