CVE-2024-36343
Possible ATT&CK Techniques 2AI
T1068 · Exploitation for Privilege Escalation T1621 · Multi-Factor Authentication Request GenerationAffected Version Matrix 23
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| AMD | AMD EPYC™ 4004 | ComboAM5PI 1.1.0.3d | unaffected |
| AMD | AMD EPYC™ 4005 | ComboAM5 1.2.0.3j | unaffected |
| AMD | AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics | RembrandtPI-FP7_1.0.0.Bg | unaffected |
| AMD | AMD Ryzen™ 7000 Series Desktop Processors | ComboAM5-PI_1.0.0.e | unaffected |
ComboAM5PI 1.1.0.3g | unaffected | ||
ComboAM5 1.2.0.3j | unaffected | ||
| AMD | AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics | PhoenixPI-FP8-FP7_1.2.0.0f | unaffected |
| AMD | AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics | DragonRangeFL1_1.0.0.3l | unaffected |
| AMD | AMD Ryzen™ 8000 Series Desktop Processors | ComboAM5PI 1.1.0.3g | unaffected |
ComboAM5 1.2.0.3j | unaffected | ||
| AMD | AMD Ryzen™ 9000 Series Desktop Processors | ComboAM5 1.2.0.3j | unaffected |
ComboAM5 1.2.0.3j | unaffected | ||
| AMD | AMD Ryzen™ 9000HX Series Mobile Processors | FireRangeFL1PI 1.0.0.0f | unaffected |
| AMD | AMD Ryzen™ AI 300 Series Processors | StrixKrackanPI-FP8_1.1.0.0f | unaffected |
StrixKrackanPI-FP8_1.1.0.2e | unaffected | ||
| AMD | AMD Ryzen™ AI MAX | StrixHaloPI-FP11_1.0.0.2b | unaffected |
| AMD | AMD Ryzen™ Embedded 7000 Series Processors | EmbeddedAM5PI 1.0.0.5 | unaffected |
| AMD | AMD Ryzen™ Embedded 8000 Series Processors | EmbeddedPhoenixPI-FP7r2_1.0.0.4 | unaffected |
| AMD | AMD Ryzen™ Embedded 9000 Series Processors | EmbeddedAM5PI 1.0.0.7 | unaffected |
| AMD | AMD Ryzen™ Embedded V3000 Series Processors | Embedded-PI_FP7r2 100F | unaffected |
| AMD | AMD Ryzen™ Threadripper™ 7000 Processors | StormPeakPI-SP6 1.1.0.0k | unaffected |
| AMD | AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors | StormPeakPI-SP6 1.0.0.1m | unaffected |
StormPeakPI-SP6_1.1.0.0k | unaffected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-36343
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a limited section of the Top of Memory Segment (TSEG) memory region, potentially resulting in loss of confidentiality or integrity.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
缓冲区下溢
Source: NVD (National Vulnerability Database)
Vulnerability Title
AMD多款产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AMD Ryzen和AMD EPYC都是美国超威半导体（AMD）公司的产品。AMD Ryzen是一款中央处理器（CPU）。AMD EPYC是一款高性能服务器处理器。 AMD多款产品存在安全漏洞，该漏洞源于输入验证不当，可能导致特权攻击者对内存段顶部区域的有限部分执行越界读取或写入，从而造成机密性或完整性损失。以下产品受到影响：AMD EPYC™ 4004、AMD EPYC™ 4005、AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics等。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-36343
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-36343
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-36343 (1)
IV. Related Vulnerabilities
Same product: AMD EPYC™ 4004
Same weakness: CWE-124
- CVE-2026-5089
YAML::Syck versions before 1.38 for Perl has an out-of-bound - CVE-2026-41499
Wazuh: Multiple Heap-based NULL WRITE Buffer Underflows in p - CVE-2026-26204
Wazuh: Heap-based NULL WRITE Buffer Underflow in GetAlertDat - CVE-2026-0966
Libssh: libssh: denial of service via zero-length input in s - CVE-2026-20104
Cisco多款产品 安全漏洞
V. Comments for CVE-2024-36343
No comments yet