CVE-2024-36354
Quick assessment
Affected
AMD AMD Ryzen™ Threadripper™ 3000 Processors
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
AMD Embedded Processors等都是美国超威半导体（AMD）公司的产品。AMD Embedded Processors是一系列嵌入式高性能 GPU。AMD Client Processor是面向客户端设备（如个人电脑、笔记本电脑等）的处理器。AMD Server Processor是面向服务器市场的处理器产品，主要用于数据中心、云计算、高性能计算等领域。 AMD多款产品存在安全漏洞，该漏洞源于对DIMM串行存在检测元数据输入验证不当，可能导致攻击者绕过SMM隔离，在SMM级别执行任意代码。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-36354
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to bypass SMM isolation potentially resulting in arbitrary code execution at the SMM level.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1231
Source: CVE Program / CVE List V5
Vulnerability Title
AMD多款产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AMD Embedded Processors等都是美国超威半导体（AMD）公司的产品。AMD Embedded Processors是一系列嵌入式高性能 GPU。AMD Client Processor是面向客户端设备（如个人电脑、笔记本电脑等）的处理器。AMD Server Processor是面向服务器市场的处理器产品，主要用于数据中心、云计算、高性能计算等领域。 AMD多款产品存在安全漏洞，该漏洞源于对DIMM串行存在检测元数据输入验证不当，可能导致攻击者绕过SMM隔离，在SMM级别执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-36354
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-36354
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-36354 (1)
Same Patch Batch · AMD · 2025-09-06 · 23 CVEs total
| CVE-2024-36342 | 8.8 HIGH | AMD Graphics Driver和AMD Embedded Processors 安全漏洞 |
| CVE-2023-31322 | 8.7 HIGH | AMD Graphics Driver 安全漏洞 |
| CVE-2024-36326 | 8.4 HIGH | AMD Client Processor 安全漏洞 |
| CVE-2024-36352 | 8.4 HIGH | AMD Graphics Driver 安全漏洞 |
| CVE-2024-21947 | 7.5 HIGH | AMD Embedded Processors和AMD Client Processor 安全漏洞 |
| CVE-2025-0032 | 7.2 HIGH | AMD多款产品 安全漏洞 |
| CVE-2023-31325 | 7.2 HIGH | AMD Graphics Driver和AMD Client Processor 安全漏洞 |
| CVE-2025-0010 | 6.1 MEDIUM | AMD Graphics Driver 安全漏洞 |
| CVE-2024-36346 | 6.0 MEDIUM | AMD Graphics Driver 安全漏洞 |
| CVE-2025-0009 | 5.5 MEDIUM | AMD Graphics Driver 安全漏洞 |
| CVE-2023-31351 | 5.3 MEDIUM | AMD Embedded Processors和AMD Server Processor 安全漏洞 |
| CVE-2025-0034 | 4.7 MEDIUM | AMD Graphics Driver 安全漏洞 |
| CVE-2024-21970 | 4.4 MEDIUM | AMD Embedded Processors和AMD Client Processor 安全漏洞 |
| CVE-2021-26377 | 4.1 MEDIUM | AMD多款产品 安全漏洞 |
| CVE-2023-31365 | 3.9 LOW | AMD Graphics Driver 安全漏洞 |
| CVE-2025-0011 | 3.3 LOW | AMD Graphics Driver 安全漏洞 |
| CVE-2023-31306 | 3.3 LOW | AMD Graphics Driver 安全漏洞 |
| CVE-2023-20516 | 3.3 LOW | AMD Graphics Driver 安全漏洞 |
| CVE-2024-36331 | 3.2 LOW | AMD Embedded Processors和AMD Server Processor 安全漏洞 |
| CVE-2021-46750 | 3.0 LOW | AMD Graphics Driver、AMD Embedded Processors和AMD Client Processor 安全漏洞 |
Showing top 20 of 23 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2024-36354
No comments yet