4.6
Medium
CVE-2024-36311 A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow a privileged attacker…
Description
A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow a privileged attacker to bypass input validation and perform an out of bounds read or write, potentially resulting in loss of confidentiality, integrity, or availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 7000 Series Desktop Processors | Versions not published | |
| AMD Ryzen™ 9000HX Series Mobile Processors | Versions not published | |
| AMD Ryzen™ 8000 Series Desktop Processors | Versions not published | |
| AMD Ryzen™ 9000 Series Desktop Processors | Versions not published | |
| AMD Ryzen™ Embedded 7000 Series Processors | Versions not published |
References
- www.amd.com www.amd.com
Timeline
- Published
- Last modified
Other CVEs of AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
The 30 CVEs of AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics →
CVE-2026-43603
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of…
6.9
Medium
CVE-2024-36343
Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to…
4.6
Medium
CVE-2025-48516
Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with…
6.9
Medium
CVE-2023-31316
Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure…
7.1
High