CVE-2024-36348 in EPYC 7002 Processors

Sumário

de MITRE • 08/07/2025

A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information leakage.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsável: AMD
• Reservar: 23/05/2024
• Divulgação: 08/07/2025
• Moderação: aceite
• Entrada: VDB-315583
• CPE: pronto
• CWE: CWE-200 (confirmado)
• CVSS: 3.8 (CNA)
• EPSS: 0.00072
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-36348
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-36348
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-36348/