CVE-2024-36355 in EPYC 9004 Processors

الملخص

بحسب MITRE • 10/02/2026

Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (sleep) wake up, potentially resulting in arbitrary code execution.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• مسؤول: AMD
• حجز: 23/05/2024
• إفشاء: 10/02/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-345377
• CPE: جاهز
• CWE: CWE-787 (مؤكد)
• CVSS: 6.4 (VulDB)
• EPSS: 0.00007
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-36355
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-36355
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-36355/