Skip to content
fr Sign in
4.6 Medium

CVE-2024-36310 Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds…

Description

Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SMRAM potentially resulting in loss of confidentiality or integrity.

Affected products and versions

Product Affected versions Fixed in
AMD EPYC™ 9004 Series Processors Versions not published
AMD EPYC™ 9005 Series Processors Versions not published
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 9000HX Series Mobile Processors Versions not published
AMD Ryzen™ AI Max 300 Series Processors Versions not published
AMD Ryzen™ AI 300 Series Processors Versions not published
AMD Ryzen™ Threadripper™ 7000 Processors Versions not published
Show the 9 other branches
Product Affected versions Fixed in
AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors Versions not published
AMD Ryzen™ 8000 Series Desktop Processors Versions not published
AMD Ryzen™ 9000 Series Desktop Processors Versions not published
Not public Versions not published
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics Versions not published
AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa") Versions not published
AMD Ryzen™ Embedded 8000 Series Processors Versions not published
AMD Ryzen™ Embedded V3000 Series Processors Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of AMD EPYC™ 9004 Series Processors

The 31 CVEs of AMD EPYC™ 9004 Series Processors →
CVE-2025-54509 Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a… 4.0 Medium CVE-2026-0432 Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to… 8.5 High CVE-2025-48512 Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO)… 7.0 High CVE-2025-61972 Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System… 8.5 High
Track this CVE