Skip to content
4.6 Medium

CVE-2024-36343 Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to…

Description

Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a limited section of the Top of Memory Segment (TSEG) memory region, potentially resulting in loss of confidentiality or integrity.

Affected products and versions

Product Affected versions Fixed in
AMD EPYC™ 4004 Versions not published
AMD EPYC™ 4005 Versions not published
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7000 Series Desktop Processors Versions not published
AMD Ryzen™ 9000HX Series Mobile Processors Versions not published
AMD Ryzen™ AI MAX Versions not published
AMD Ryzen™ AI 300 Series Processors Versions not published
Show the 8 other branches

References

Timeline

  1. Published
  2. Last modified
The 2 CVEs of AMD EPYC™ 4004 →
Track this CVE