Vulnerability-Lookup

BDU:2026-01991 (CVE-2024-36355)

Vulnerability from fstec – Published: 2026-02-20 – Updated: 2026-02-20 – View on bdu.fstec.ru Fixed

Title

Уязвимость обработчика SMM микропрограммного обеспечения графических процессоров AMD, позволяющая нарушителю выполнить произвольный код

Summary

Уязвимость обработчика SMM микропрограммного обеспечения графических процессоров AMD связана с записью за границами буфера. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код

Severity

3.8 (Low) CVSS 2.0


                      
                        AV:L/AC:H/Au:S/C:N/I:C/A:N

5.3 (Medium) CVSS 3.1


                      
                        CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N

7.0 (High) CVSS 4.0


                      
                        CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-787 - Запись за границами буфера

Aliases

CVE-2024-36355

References

2 references

URL
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3023.html
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html

Impacted products

33 products from 1 vendor

Vendors

Advanced Micro Devices Inc.

Products

AMD Ryzen Threadripper PRO 7000 WX-Series Processors, AMD EPYC Embedded 9004 Series Processors (formerly codenamed "Genoa"), AMD Ryzen 7040 Series Mobile Processors with Radeon Graphics, AMD Ryzen 8040 Series Mobile Processors with Radeon Graphics Hawk Point, AMD Ryzen 9000 Series Desktop Processors, AMD Ryzen Embedded 8000, AMD Ryzen Embedded V3000, AMD Ryzen Embedded 7000, AMD EPYC 9004 Series, AMD Ryzen Embedded 5000, AMD Ryzen Embedded R1000, AMD Ryzen Embedded R2000, AMD Ryzen Embedded V1000, AMD Ryzen Embedded V2000, AMD Athlon 3000 Series Mobile processor with Radeon graphics, AMD Athlon 3000 Series Desktop Processors with Radeon Graphics, AMD Ryzen 3000 Series Mobile processor with Radeon graphics, AMD Ryzen 4000 Series Desktop Processors, AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen 5000 Series Desktop Processors, AMD Ryzen 5000 Series Desktop processor with Radeon graphics, AMD Ryzen 5000 Series Mobile processor with Radeon graphics, AMD Ryzen 7000 Series Desktop Processors, AMD Ryzen 7020 Series Processors with Radeon Graphics, AMD Ryzen 7045 Series Mobile Processors, AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix, AMD Ryzen Threadripper 7000 Processors, AMD Ryzen Threadripper PRO 3000 WX-Series, AMD Ryzen Threadripper PRO 5000 WX-Series, AMD Ryzen Threadripper PRO 9000 WX-Series Processors, AMD Ryzen Z1 Series Processors, AMD Ryzen Z2 Series Processors, AMD Ryzen Z2 Series Processors Go

Versions

до StormPeakPI-SP6 1.0.0.1k (AMD Ryzen Threadripper PRO 7000 WX-Series Processors), до StormPeakPI-SP6 1.1.0.0i (AMD Ryzen Threadripper PRO 7000 WX-Series Processors), до EmbGenoaPI-SP5 1.0.0.B (AMD EPYC Embedded 9004 Series Processors (formerly codenamed "Genoa")), до PhoenixPI-FP8-FP7_1.2.0.0c (AMD Ryzen 7040 Series Mobile Processors with Radeon Graphics), до PhoenixPI-FP8-FP7_1.2.0.0c (AMD Ryzen 8040 Series Mobile Processors with Radeon Graphics Hawk Point), до ComboAM5PI 1.2.0.3d (AMD Ryzen 9000 Series Desktop Processors), до EmbeddedPhoenixPI-FP7r2_1.0.0.2 (AMD Ryzen Embedded 8000), до Embedded-PI_FP7r2 1.0.0.F (AMD Ryzen Embedded V3000), до EmbeddedAM5PI 1.0.0.4 (AMD Ryzen Embedded 7000), до GenoaPI 1.0.0.E (AMD EPYC 9004 Series), до EmbAM4PI 1.0.0.8 (AMD Ryzen Embedded 5000), до EmbeddedPI-FP5 1.2.1.1 (AMD Ryzen Embedded R1000), до EmbeddedR2KPI-FP5 1.0.0.6 (AMD Ryzen Embedded R2000), до EmbeddedPI-FP5 1.2.1.1 (AMD Ryzen Embedded V1000), до EmbeddedPI-FP6_1.0.0.B (AMD Ryzen Embedded V2000), до PicassoPI-FP5_1.0.1.2c (AMD Athlon 3000 Series Mobile processor with Radeon graphics), до ComboAM4v2PI 1.2.0.10 (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), до PicassoPI-FP5_1.0.1.2c (AMD Ryzen 3000 Series Mobile processor with Radeon graphics), до ComboAM4v2PI 1.2.0.10 (AMD Ryzen 4000 Series Desktop Processors), до RenoirPI-FP6 1.0.0.Eb (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), до ComboAM4v2PI 1.2.0.10 (AMD Ryzen 5000 Series Desktop Processors), до ComboAM4v2PI 1.2.0.10 (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), до CezannePI-FP6_1.0.1.1b (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), до RembrandtPI-FP7_1.0.0.Bb (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), до ComboAM5 1.2.0.3d (AMD Ryzen 7000 Series Desktop Processors), до ComboAM5 1.1.0.3c (AMD Ryzen 7000 Series Desktop Processors), до MendocinoPI-FT6_1.0.0.7b (AMD Ryzen 7020 Series Processors with Radeon Graphics), до DragonRangeFL1_1.0.0.3g (AMD Ryzen 7045 Series Mobile Processors), до DragonRangeFL1_1.0.0.3g (AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix), до StormPeakPI-SP6 1.1.0.0i (AMD Ryzen Threadripper 7000 Processors), до ChagallWSPI-sWRX8-1.0.0.B (AMD Ryzen Threadripper PRO 3000 WX-Series), до CastlePeakWSPI-sWRX8 1.0.0.G (AMD Ryzen Threadripper PRO 3000 WX-Series), до ChagallWSPI-sWRX8-1.0.0.B (AMD Ryzen Threadripper PRO 5000 WX-Series), до ComboAM5 1.1.0.3c (AMD Ryzen Threadripper PRO 9000 WX-Series Processors), до ComboAM5 1.1.0.3c (AMD Ryzen Z1 Series Processors), до ComboAM5 1.2.0.3d (AMD Ryzen Z1 Series Processors), до PhoenixPI-FP8-FP7_1.2.0.0c (AMD Ryzen Z2 Series Processors), до RembrandtPI-FP7_1.0.0.Bb (AMD Ryzen Z2 Series Processors Go)

Product types

Firmware, Appliance software, Микропрограммный код аппаратных компонентов компьютера

Mitigations

Использование рекомендаций производителя: https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3023.html https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:H/Au:S/C:N/I:C/A:N",
  "CVSS 3.0": "AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N",
  "CVSS 4.0": "AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H",
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Advanced Micro Devices Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e StormPeakPI-SP6 1.0.0.1k (AMD Ryzen Threadripper PRO 7000 WX-Series Processors), \u0434\u043e StormPeakPI-SP6 1.1.0.0i (AMD Ryzen Threadripper PRO 7000 WX-Series Processors), \u0434\u043e EmbGenoaPI-SP5 1.0.0.B (AMD EPYC Embedded 9004 Series Processors (formerly codenamed \"Genoa\")), \u0434\u043e PhoenixPI-FP8-FP7_1.2.0.0c (AMD Ryzen 7040 Series Mobile Processors with Radeon Graphics), \u0434\u043e PhoenixPI-FP8-FP7_1.2.0.0c (AMD Ryzen 8040 Series Mobile Processors with Radeon Graphics Hawk Point), \u0434\u043e ComboAM5PI 1.2.0.3d (AMD Ryzen 9000 Series Desktop Processors), \u0434\u043e EmbeddedPhoenixPI-FP7r2_1.0.0.2 (AMD Ryzen Embedded 8000), \u0434\u043e Embedded-PI_FP7r2 1.0.0.F (AMD Ryzen Embedded V3000), \u0434\u043e EmbeddedAM5PI 1.0.0.4 (AMD Ryzen Embedded 7000), \u0434\u043e GenoaPI 1.0.0.E (AMD EPYC 9004 Series), \u0434\u043e EmbAM4PI 1.0.0.8 (AMD Ryzen Embedded 5000), \u0434\u043e EmbeddedPI-FP5 1.2.1.1 (AMD Ryzen Embedded R1000), \u0434\u043e EmbeddedR2KPI-FP5 1.0.0.6 (AMD Ryzen Embedded R2000), \u0434\u043e EmbeddedPI-FP5 1.2.1.1 (AMD Ryzen Embedded V1000), \u0434\u043e EmbeddedPI-FP6_1.0.0.B (AMD Ryzen Embedded V2000), \u0434\u043e PicassoPI-FP5_1.0.1.2c (AMD Athlon 3000 Series Mobile processor with Radeon graphics), \u0434\u043e ComboAM4v2PI 1.2.0.10 (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), \u0434\u043e PicassoPI-FP5_1.0.1.2c (AMD Ryzen 3000 Series Mobile processor with Radeon graphics), \u0434\u043e ComboAM4v2PI 1.2.0.10 (AMD Ryzen 4000 Series Desktop Processors), \u0434\u043e RenoirPI-FP6 1.0.0.Eb (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), \u0434\u043e ComboAM4v2PI 1.2.0.10 (AMD Ryzen 5000 Series Desktop Processors), \u0434\u043e ComboAM4v2PI 1.2.0.10 (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), \u0434\u043e CezannePI-FP6_1.0.1.1b (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), \u0434\u043e RembrandtPI-FP7_1.0.0.Bb (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), \u0434\u043e ComboAM5 1.2.0.3d (AMD Ryzen 7000 Series Desktop Processors), \u0434\u043e ComboAM5 1.1.0.3c (AMD Ryzen 7000 Series Desktop Processors), \u0434\u043e MendocinoPI-FT6_1.0.0.7b (AMD Ryzen 7020 Series Processors with Radeon Graphics), \u0434\u043e DragonRangeFL1_1.0.0.3g (AMD Ryzen 7045 Series Mobile Processors), \u0434\u043e DragonRangeFL1_1.0.0.3g (AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix), \u0434\u043e StormPeakPI-SP6 1.1.0.0i (AMD Ryzen Threadripper 7000 Processors), \u0434\u043e ChagallWSPI-sWRX8-1.0.0.B (AMD Ryzen Threadripper PRO 3000 WX-Series), \u0434\u043e CastlePeakWSPI-sWRX8 1.0.0.G (AMD Ryzen Threadripper PRO 3000 WX-Series), \u0434\u043e ChagallWSPI-sWRX8-1.0.0.B (AMD Ryzen Threadripper PRO 5000 WX-Series), \u0434\u043e ComboAM5 1.1.0.3c (AMD Ryzen Threadripper PRO 9000 WX-Series Processors), \u0434\u043e ComboAM5 1.1.0.3c (AMD Ryzen Z1 Series Processors), \u0434\u043e ComboAM5 1.2.0.3d (AMD Ryzen Z1 Series Processors), \u0434\u043e PhoenixPI-FP8-FP7_1.2.0.0c (AMD Ryzen Z2 Series Processors), \u0434\u043e RembrandtPI-FP7_1.0.0.Bb (AMD Ryzen Z2 Series Processors Go)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3023.html\nhttps://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "10.02.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "20.02.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "20.02.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-01991",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-36355",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "AMD Ryzen Threadripper PRO 7000 WX-Series Processors, AMD EPYC Embedded 9004 Series Processors (formerly codenamed \"Genoa\"), AMD Ryzen 7040 Series Mobile Processors with Radeon Graphics, AMD Ryzen 8040 Series Mobile Processors with Radeon Graphics Hawk Point, AMD Ryzen 9000 Series Desktop Processors, AMD Ryzen Embedded 8000, AMD Ryzen Embedded V3000, AMD Ryzen Embedded 7000, AMD EPYC 9004 Series, AMD Ryzen Embedded 5000, AMD Ryzen Embedded R1000, AMD Ryzen Embedded R2000, AMD Ryzen Embedded V1000, AMD Ryzen Embedded V2000, AMD Athlon 3000 Series Mobile processor with Radeon graphics, AMD Athlon 3000 Series Desktop Processors with Radeon Graphics, AMD Ryzen 3000 Series Mobile processor with Radeon graphics, AMD Ryzen 4000 Series Desktop Processors, AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen 5000 Series Desktop Processors, AMD Ryzen 5000 Series Desktop processor with Radeon graphics, AMD Ryzen 5000 Series Mobile processor with Radeon graphics, AMD Ryzen 7000 Series Desktop Processors, AMD Ryzen 7020 Series Processors with Radeon Graphics, AMD Ryzen 7045 Series Mobile Processors, AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix, AMD Ryzen Threadripper 7000 Processors, AMD Ryzen Threadripper PRO 3000 WX-Series, AMD Ryzen Threadripper PRO 5000 WX-Series, AMD Ryzen Threadripper PRO 9000 WX-Series Processors, AMD Ryzen Z1 Series Processors, AMD Ryzen Z2 Series Processors, AMD Ryzen Z2 Series Processors Go",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 SMM \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0417\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 (CWE-787)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 SMM \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3023.html\nhttps://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-787",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 3,8)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,3)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 4.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7)"
}

CVE-2024-36355 (GCVE-0-2024-36355)

Vulnerability from cvelistv5 – Published: 2026-02-10 19:28 – Updated: 2026-02-26 14:44

Summary

Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (sleep) wake up, potentially resulting in arbitrary code execution.

Severity

7 (High)


                        
                          CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-02-11 04:56 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

AMD mitre root

References

2 references

URL	Tags
https://www.amd.com/en/resources/product-security…
https://www.amd.com/en/resources/product-security…

Impacted products

36 products

Vendor	Product	Version
AMD	AMD EPYC™ 9004 Series Processors	Unaffected: GenoaPI 1.0.0.E
AMD	AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors	Unaffected: ChagallWSPI-sWRX8-1.0.0.B
AMD	AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics	Unaffected: CezannePI-FP6_1.0.1.1b
AMD	AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors	Unaffected: CastlePeakWSPI-sWRX8 1.0.0.G Unaffected: ChagallWSPI-sWRX8-1.0.0.B
AMD	AMD Ryzen™ Z1 Series Processors	Unaffected: ComboAM5 1.1.0.3c / ComboAM5 1.2.0.3d
AMD	AMD Ryzen™ 9000 Series Desktop Processors	Unaffected: ComboAM5 1.2.0.3d
AMD	AMD Ryzen™ 7000 Series Desktop Processors	Unaffected: ComboAM5 1.2.0.3d Unaffected: ComboAM5 1.1.0.3c Unaffected: ComboAM5PI 1.0.0.E
AMD	AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics	Unaffected: PicassoPI-FP5_1.0.1.2c
AMD	AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics	Unaffected: ComboAM4v2PI 1.2.0.10
AMD	AMD Ryzen™ 3000 Series Desktop Processors	Unaffected: ComboAM4PI 1.0.0.10 Unaffected: ComboAM4v2PI 1.2.0.10
AMD	AMD Ryzen™ 8000 Series Desktop Processors	Unaffected: ComboAM5 1.1.0.3c
AMD	AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics	Unaffected: PhoenixPI-FP8-FP7_1.2.0.0c
AMD	AMD Ryzen™ Threadripper™ 7000 processor	Unaffected: StormPeakPI-SP6 1.1.0.0i
AMD	AMD Ryzen™ Threadripper™ PRO 7000 WX-Series processors	Unaffected: StormPeakPI-SP6 1.0.0.1k / StormPeakPI-SP6 1.1.0.0i
AMD	AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics	Unaffected: PhoenixPI-FP8-FP7_1.2.0.0c
AMD	AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics	Unaffected: RenoirPI-FP6 1.0.0.Eb
AMD	AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics	Unaffected: RembrandtPI-FP7_1.0.0.Bb
AMD	AMD Ryzen™ 8000 Series Desktop	Unaffected: ComboAM5 1.2.0.3d
AMD	AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics	Unaffected: MendocinoPI-FT6_1.0.0.7b
AMD	AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics	Unaffected: DragonRangeFL1_1.0.0.3g
AMD	AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics	Unaffected: PicassoPI-FP5_1.0.1.2c
AMD	AMD Ryzen™ 4000 Series Desktop Processors	Unaffected: ComboAM4v2PI 1.2.0.10
AMD	AMD Ryzen™ 5000 Series Desktop Processors	Unaffected: ComboAM4v2PI 1.2.0.10
AMD	AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors	Unaffected: StormPeakPI-SP6 1.1.0.0i
AMD	AMD Ryzen™ Z2 Series Processors	Unaffected: PhoenixPI-FP8-FP7_1.2.0.0c
AMD	AMD Ryzen™ Z2 Series Processors Go	Unaffected: RembrandtPI-FP7_1.0.0.Bb
AMD	AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")	Unaffected: EmbGenoaPI-SP5 1.0.0.B
AMD	AMD Ryzen™ Embedded R1000 Series Processors	Unaffected: EmbeddedPI-FP5 1211
AMD	AMD Ryzen™ Embedded R2000 Series Processors	Unaffected: EmbeddedR2KPI-FP5 1006
AMD	AMD Ryzen™ Embedded 5000 Series Processors	Unaffected: EmbAM4PI 1008
AMD	AMD Ryzen™ Embedded 7000 Series Processors	Unaffected: EmbeddedAM5PI 1.0.0.4
AMD	AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")	Unaffected: EmbeddedPI-FP5 1211
AMD	AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso")	Unaffected: EmbeddedPI-FP5 1211
AMD	AMD Ryzen™ Embedded V2000 Series Processors	Unaffected: EmbeddedPI-FP6_1.0.0.B
AMD	AMD Ryzen™ Embedded V3000 Series Processors	Unaffected: Embedded-PI_FP7r2 100F
AMD	AMD Ryzen™ Embedded 8000 Series Processors	Unaffected: EmbeddedPhoenixPI-FP7r2_1.0.0.2

Date Public

2026-02-12 17:47

Credits

Reported through AMD Bug Bounty Program

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-36355",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-11T04:56:52.747594Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T14:44:29.203Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 9004 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "GenoaPI 1.0.0.E"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 5000 WX-Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ChagallWSPI-sWRX8-1.0.0.B"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "CezannePI-FP6_1.0.1.1b"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 3000 WX-Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "CastlePeakWSPI-sWRX8 1.0.0.G"
            },
            {
              "status": "unaffected",
              "version": "ChagallWSPI-sWRX8-1.0.0.B"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Z1 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5 1.1.0.3c / ComboAM5 1.2.0.3d"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 9000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5 1.2.0.3d"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5 1.2.0.3d"
            },
            {
              "status": "unaffected",
              "version": "ComboAM5 1.1.0.3c"
            },
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.0.0.E"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 3000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PicassoPI-FP5_1.0.1.2c"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Desktop Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2PI 1.2.0.10"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 3000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4PI 1.0.0.10"
            },
            {
              "status": "unaffected",
              "version": "ComboAM4v2PI 1.2.0.10"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 8000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5 1.1.0.3c"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7040 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PhoenixPI-FP8-FP7_1.2.0.0c"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 7000 processor",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "StormPeakPI-SP6 1.1.0.0i"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 7000 WX-Series processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "StormPeakPI-SP6 1.0.0.1k / StormPeakPI-SP6 1.1.0.0i"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 8040 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PhoenixPI-FP8-FP7_1.2.0.0c"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 4000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "RenoirPI-FP6 1.0.0.Eb"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 6000 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "RembrandtPI-FP7_1.0.0.Bb"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 8000 Series Desktop",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5 1.2.0.3d"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7020 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "MendocinoPI-FT6_1.0.0.7b"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7045 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "DragonRangeFL1_1.0.0.3g"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Athlon\u2122 3000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PicassoPI-FP5_1.0.1.2c"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 4000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2PI 1.2.0.10"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2PI 1.2.0.10"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 7000 WX-Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "StormPeakPI-SP6 1.1.0.0i"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Z2 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PhoenixPI-FP8-FP7_1.2.0.0c"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Z2 Series Processors Go",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "RembrandtPI-FP7_1.0.0.Bb"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 9004 Series Processors (formerly codenamed \"Genoa\")",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbGenoaPI-SP5 1.0.0.B"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded R1000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5 1211"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded R2000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedR2KPI-FP5 1006"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded 5000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbAM4PI 1008"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded 7000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedAM5PI 1.0.0.4\u200b"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V1000 Series Processors (formerly codenamed \"Raven Ridge\")",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5 1211"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V1000 Series Processors (formerly codenamed \"Picasso\")",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5 1211"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V2000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP6_1.0.0.B"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V3000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Embedded-PI_FP7r2 100F"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded 8000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPhoenixPI-FP7r2_1.0.0.2"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Reported through AMD Bug Bounty Program"
        }
      ],
      "datePublic": "2026-02-12T17:47:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (sleep) wake up, potentially resulting in arbitrary code execution.\u003cbr\u003e"
            }
          ],
          "value": "Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (sleep) wake up, potentially resulting in arbitrary code execution."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787  Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-12T17:49:05.987Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html"
        },
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3023.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "AMD PSIRT Automation 1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2024-36355",
    "datePublished": "2026-02-10T19:28:04.884Z",
    "dateReserved": "2024-05-23T19:44:50.001Z",
    "dateUpdated": "2026-02-26T14:44:29.203Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.