Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-36343

Quick assessment

Affected
AMD AMD EPYC™ 4004
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

AMD Ryzen和AMD EPYC都是美国超威半导体（AMD）公司的产品。AMD Ryzen是一款中央处理器（CPU）。AMD EPYC是一款高性能服务器处理器。 AMD多款产品存在安全漏洞，该漏洞源于输入验证不当，可能导致特权攻击者对内存段顶部区域的有限部分执行越界读取或写入，从而造成机密性或完整性损失。以下产品受到影响：AMD EPYC™ 4004、AMD EPYC™ 4005、AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics等。

AI Predicted 5.5 Difficulty: Hard EPSS 0.19% · P7

Affected Version Matrix 23

VendorProduct Version RangeStatus
AMD AMD EPYC™ 4004 ComboAM5PI 1.1.0.3d unaffected
AMD AMD EPYC™ 4005 ComboAM5 1.2.0.3j unaffected
AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics RembrandtPI-FP7_1.0.0.Bg unaffected
AMD AMD Ryzen™ 7000 Series Desktop Processors ComboAM5-PI_1.0.0.e unaffected
ComboAM5PI 1.1.0.3g unaffected
ComboAM5 1.2.0.3j unaffected
AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics PhoenixPI-FP8-FP7_1.2.0.0f unaffected
AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics DragonRangeFL1_1.0.0.3l unaffected
AMD AMD Ryzen™ 8000 Series Desktop Processors ComboAM5PI 1.1.0.3g unaffected
ComboAM5 1.2.0.3j unaffected
AMD AMD Ryzen™ 9000 Series Desktop Processors ComboAM5 1.2.0.3j unaffected
ComboAM5 1.2.0.3j unaffected
AMD AMD Ryzen™ 9000HX Series Mobile Processors FireRangeFL1PI 1.0.0.0f unaffected
AMD AMD Ryzen™ AI 300 Series Processors StrixKrackanPI-FP8_1.1.0.0f unaffected
StrixKrackanPI-FP8_1.1.0.2e unaffected
AMD AMD Ryzen™ AI MAX StrixHaloPI-FP11_1.0.0.2b unaffected
AMD AMD Ryzen™ Embedded 7000 Series Processors EmbeddedAM5PI 1.0.0.5 unaffected
AMD AMD Ryzen™ Embedded 8000 Series Processors EmbeddedPhoenixPI-FP7r2_1.0.0.4 unaffected
AMD AMD Ryzen™ Embedded 9000 Series Processors EmbeddedAM5PI 1.0.0.7 unaffected
AMD AMD Ryzen™ Embedded V3000 Series Processors Embedded-PI_FP7r2 100F unaffected
AMD AMD Ryzen™ Threadripper™ 7000 Processors StormPeakPI-SP6 1.1.0.0k unaffected
AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors StormPeakPI-SP6 1.0.0.1m unaffected
StormPeakPI-SP6_1.1.0.0k unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-36343

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a limited section of the Top of Memory Segment (TSEG) memory region, potentially resulting in loss of confidentiality or integrity.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
缓冲区下溢
Source: CVE Program / CVE List V5
Vulnerability Title
AMD多款产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AMD Ryzen和AMD EPYC都是美国超威半导体（AMD）公司的产品。AMD Ryzen是一款中央处理器（CPU）。AMD EPYC是一款高性能服务器处理器。 AMD多款产品存在安全漏洞，该漏洞源于输入验证不当，可能导致特权攻击者对内存段顶部区域的有限部分执行越界读取或写入，从而造成机密性或完整性损失。以下产品受到影响：AMD EPYC™ 4004、AMD EPYC™ 4005、AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics等。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
AMD AMD EPYC™ 4004 ComboAM5PI 1.1.0.3d -
AMD AMD EPYC™ 4005 ComboAM5 1.2.0.3j -
AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics RembrandtPI-FP7_1.0.0.Bg -
AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics PhoenixPI-FP8-FP7_1.2.0.0f -
AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics DragonRangeFL1_1.0.0.3l -
AMD AMD Ryzen™ 7000 Series Desktop Processors ComboAM5-PI_1.0.0.e -
AMD AMD Ryzen™ 9000HX Series Mobile Processors FireRangeFL1PI 1.0.0.0f -
AMD AMD Ryzen™ AI MAX StrixHaloPI-FP11_1.0.0.2b -
AMD AMD Ryzen™ AI 300 Series Processors StrixKrackanPI-FP8_1.1.0.0f -
AMD AMD Ryzen™ Threadripper™ 7000 Processors StormPeakPI-SP6 1.1.0.0k -
AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors StormPeakPI-SP6 1.0.0.1m -
AMD AMD Ryzen™ 8000 Series Desktop Processors ComboAM5PI 1.1.0.3g -
AMD AMD Ryzen™ 8000 Series Desktop Processors ComboAM5 1.2.0.3j -
AMD AMD Ryzen™ 9000 Series Desktop Processors ComboAM5 1.2.0.3j -
AMD AMD Ryzen™ 9000 Series Desktop Processors ComboAM5 1.2.0.3j -
AMD AMD Ryzen™ Embedded V3000 Series Processors Embedded-PI_FP7r2 100F -
AMD AMD Ryzen™ Embedded 7000 Series Processors EmbeddedAM5PI 1.0.0.5 -
AMD AMD Ryzen™ Embedded 8000 Series Processors EmbeddedPhoenixPI-FP7r2_1.0.0.4 -
AMD AMD Ryzen™ Embedded 9000 Series Processors EmbeddedAM5PI 1.0.0.7 -

II. Public POCs for CVE-2024-36343

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-36343

请登录查看更多情报信息。

Vendor Advisories for CVE-2024-36343 (1)

IV. Related Vulnerabilities

Same product: AMD EPYC™ 4004
Same vendor: AMD
Same weakness: CWE-124

V. Comments for CVE-2024-36343

No comments yet

Leave a comment