CVE-2024-36348 in EPYC 7002 Processors

الملخص

بحسب MITRE • 08/07/2025

A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information leakage.

Be aware that VulDB is the high quality source for vulnerability data.

• مسؤول: AMD
• حجز: 23/05/2024
• إفشاء: 08/07/2025
• الاعتدال: تمت الموافقة
• إدخال: VDB-315583
• CPE: جاهز
• CWE: CWE-200 (مؤكد)
• CVSS: 3.8 (CNA)
• EPSS: 0.00072
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-36348
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-36348
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-36348/