Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-36357

Quick assessment

Affected
AMD AMD EPYC™ 7003 Series Processors
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

AMD Processors是美国超威半导体（AMD）公司的一款处理器。 AMD Processors存在安全漏洞，该漏洞源于攻击者可能推断L1D缓存中的数据，可能导致跨特权边界的敏感信息泄露。

CVSS 5.6 · Medium EPSS 0.34% · P25

Possible ATT&CK Techniques 1 AI

T1530 · Data from Cloud Storage
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-36357

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1421
Source: CVE Program / CVE List V5
Vulnerability Title
AMD Processors 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AMD Processors是美国超威半导体（AMD）公司的一款处理器。 AMD Processors存在安全漏洞，该漏洞源于攻击者可能推断L1D缓存中的数据，可能导致跨特权边界的敏感信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
AMD AMD EPYC™ 7003 Series Processors MilanPI 1.0.0.G + OS Updates -
AMD AMD EPYC™ 9004 Series Processors GenoaPI 1.0.0.E + OS Updates -
AMD AMD EPYC™ 8004 Series Processors GenoaPI 1.0.0.E + OS Updates -
AMD AMD EPYC™ 9V64H Processor MI300PI 1.0.0.7 + OS Updates -
AMD AMD Ryzen™ 5000 Series Desktop Processors ComboAM4v2PI 1.2.0.E + OS Updates -
AMD AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics ComboAM4v2PI 1.2.0.E + OS Updates -
AMD AMD Ryzen™ 7000 Series Desktop Processors ComboAM5PI 1.2.0.3 + OS Updates -
AMD AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics ComboAM5PI 1.2.0.3 + OS Updates -
AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors StormPeakPI-SP6 1.1.0.0i + OS Updates -
AMD AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics RembrandtPI-FP7 1.0.0.Bb + OS Updates -
AMD AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics RembrandtPI-FP7 1.0.0.Bb + OS Updates -
AMD AMD Ryzen™ 7000 Series Processors with Radeon™ Graphics CezannePI-FP6 1.0.1.1b + OS Updates -
AMD AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics PhoenixPI-FP8-FP7 1.2.0.0 + OS Updates -
AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics PhoenixPI-FP8-FP7 1.2.0.0 + OS Updates -
AMD AMD Ryzen™ 7000 Series Mobile Processors DragonRangeFL1 1.0.0.3g + OS Updates -
AMD AMD EPYC™ Embedded 7003 Series Processors EmbMilanPI-SP3 1.0.0.A + OS updates -
AMD AMD EPYC™ Embedded 8004 Series Processors EmbGenoaPI-SP5 1.0.0.9 + OS updates -
AMD AMD EPYC™ Embedded 9004 Series Processors EmbGenoaPI-SP5 1.0.0.9 + OS updates -
AMD AMD Ryzen™ Embedded 5000 Series Processors EmbAM4PI 1.0.0.7 + OS Update -
AMD AMD Ryzen™ Embedded 7000 Series Processors EmbeddedAM5PI 1.0.0.3 + OS updates -
AMD AMD Ryzen™ Embedded V3000 Series Processors Embedded-PI_FP7r2 100C + OS updates -
AMD AMD EPYC™ Embedded 97X4 EmbGenoaPI-SP5 1.0.0.9 + OS updates -
AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics CezannePI-FP6 1.0.1.1b + OS Updates -

II. Public POCs for CVE-2024-36357

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-36357

请登录查看更多情报信息。

Same Patch Batch · AMD · 2025-07-08 · 4 CVEs total

CVE-2024-36350 5.6 MEDIUM AMD Processors 安全漏洞
CVE-2024-36349 3.8 LOW AMD Processors 安全漏洞
CVE-2024-36348 3.8 LOW AMD Processors 安全漏洞

IV. Related Vulnerabilities

Same product: AMD EPYC™ 7003 Series Processors
Same vendor: AMD
Same weakness: CWE-1421

V. Comments for CVE-2024-36357

No comments yet

Leave a comment