CVE-2024-36344
Summary
| CVE | CVE-2024-36344 |
|---|---|
| State | PUBLISHED |
| Assigner | AMD |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-11-12 20:18:12 UTC |
| Updated | 2026-11-12 22:18:35 UTC |
| Description | Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE DrvSys could allow an attacker with local access to the Trusted Execution Environment (TEE) interface or Trusted Application (TA) to cause an out-of-bounds write, potentially resulting in a loss of platform integrity or denial of service. |
Risk And Classification
Primary CVSS: v4.0 6.9 MEDIUM from [email protected]
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Problem Types: CWE-191 | CWE-191 CWE-191 Integer Underflow (Wrap or Wraparound)
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 4.0 | [email protected] | Secondary | 6.9 | MEDIUM | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/C... |
| 4.0 | CNA | CVSS | 6.9 | MEDIUM | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N |
CVSS v4.0 Breakdown
Attack Vector
LocalAttack Complexity
LowAttack Requirements
NonePrivileges Required
LowUser Interaction
NoneConfidentiality
NoneIntegrity
HighAvailability
LowSub Conf.
NoneSub Integrity
NoneSub Availability
NoneCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | AMD | AMD EPYC 4004 Series Processors | unaffected ComboAM5PI_1.0.0.B | Not specified |
| CNA | AMD | AMD EPYC 9005 Series Processors | unaffected TurinPI 1.0.0.6 | Not specified |
| CNA | AMD | AMD Ryzen 4000 Series Mobile Processors With Radeon Graphics | unaffected RenoirPI-FP6_1.0.0.Ec | Not specified |
| CNA | AMD | AMD Ryzen 7035 Series Processors With Radeon Graphics | unaffected RembrandtPI-FP7_1.0.0.BD | Not specified |
| CNA | AMD | AMD Athlon 3000 Series Mobile Processors With Radeon Graphics | unaffected PicassoPI-FP5_1.0.1.2c | Not specified |
| CNA | AMD | AMD Ryzen 7040 Series Mobile Processors With Radeon Graphics | unaffected PhoenixPI-FP8-FP7_1.2.0.B | Not specified |
| CNA | AMD | AMD Ryzen 7020 Series Processors With Radeon Graphics | unaffected MendocinoPI-FT6_1.0.0.7c | Not specified |
| CNA | AMD | AMD Ryzen 7045 Series Mobile Processors With Radeon Graphics | unaffected DragonRangeFL1 1.0.0.3h | Not specified |
| CNA | AMD | AMD Ryzen 7000 Series Desktop Processors | unaffected ComboAM5PI_1.0.0.B | Not specified |
| CNA | AMD | AMD Ryzen 7000 Series Desktop Processors | unaffected ComboAM5PI 1.1.0.3d | Not specified |
| CNA | AMD | AMD Ryzen 7000 Series Desktop Processors | unaffected ComboAM5PI 1.2.0.3d | Not specified |
| CNA | AMD | AMD Ryzen 3000 Series Desktop Processors | unaffected ComboAM4v2 1.2.0.10 | Not specified |
| CNA | AMD | AMD Ryzen Threadripper PRO 3000 WX-Series Processors | unaffected ChagallWSPI-sWRX8 1.0.0.C | Not specified |
| CNA | AMD | AMD Ryzen Threadripper PRO 3000 WX-Series Processors | unaffected CastlePeakWSPI-sWRX8 1.0.0.H | Not specified |
| CNA | AMD | AMD Ryzen 7030 Series Mobile Processors With Radeon Graphics | unaffected CezannePI-FP6_1.0.1.1c | Not specified |
| CNA | AMD | AMD Ryzen Threadripper 3000 Processors | unaffected CastlePeakPI-SP3r3_1.0.0.F | Not specified |
| CNA | AMD | AMD Ryzen Threadripper PRO 5000 WX-Series Processors | unaffected ChagallWSPI-sWRX8 1.0.0.C | Not specified |
| CNA | AMD | AMD Ryzen Threadripper 7000 Processors | unaffected StormPeakPI-SP6_1.1.0.0j | Not specified |
| CNA | AMD | AMD Ryzen Threadripper PRO 7000 WX-Series Processors | unaffected StormPeakPI-SP6_1.0.0.1l | Not specified |
| CNA | AMD | AMD Ryzen Threadripper PRO 7000 WX-Series Processors | unaffected StormPeakPI-SP6_1.1.0.0j | Not specified |
| CNA | AMD | AMD Ryzen 8000 Series Desktop Processors | unaffected ComboAM5PI 1.1.0.3d | Not specified |
| CNA | AMD | AMD Ryzen 8000 Series Desktop Processors | unaffected ComboAM5 1.2.0.3d | Not specified |
| CNA | AMD | AMD Ryzen 9000 Series Desktop Processors | unaffected ComboAM5 1.2.0.3d | Not specified |
| CNA | AMD | AMD Ryzen 5000 Series Mobile Processors With Radeon Graphics | unaffected CezannePI-FP6_1.0.1.1c | Not specified |
| CNA | AMD | AMD Ryzen 5000 Series Mobile Processors With Radeon Graphics | unaffected CezannePI-FP6_1.0.1.1c | Not specified |
| CNA | AMD | AMD Ryzen 4000 Series Desktop Processors | unaffected ComboAM4v2PI_1.2.0.F | Not specified |
| CNA | AMD | AMD Ryzen 5000 Series Desktop Processors | unaffected ComboAM4v2 1.2.0.10 | Not specified |
| CNA | AMD | AMD Ryzen 5000 Series Desktop Processors With Radeon Graphics | unaffected ComboAM4v2PI_1.2.0.F | Not specified |
| CNA | AMD | AMD Ryzen 3000 Series Desktop Processors | unaffected ComboAM4PI 1.0.0.10 | Not specified |
| CNA | AMD | AMD Ryzen 8040 Series Mobile Processors With Radeon Graphics | unaffected PhoenixPI-FP8-FP7_1.2.0.B | Not specified |
| CNA | AMD | AMD Ryzen 3000 Series Mobile Processors With Radeon Graphics | unaffected PicassoPI-FP5_1.0.1.2c | Not specified |
| CNA | AMD | AMD Ryzen 6000 Series Processors With Radeon Graphics | unaffected RembrandtPI-FP7_1.0.0.BD | Not specified |
| CNA | AMD | AMD Ryzen Embedded R1000 Series Processors | unaffected EmbeddedPI-FP5 1211 | Not specified |
| CNA | AMD | AMD Ryzen Embedded R2000 Series Processors | unaffected EmbeddedR2KPI-FP5 1006 | Not specified |
| CNA | AMD | AMD Ryzen Embedded V1000 Series Processors Formerly Codenamed Raven Ridge | unaffected EmbeddedPI-FP5 1211 | Not specified |
| CNA | AMD | AMD Ryzen Embedded 5000 Series Processors | unaffected EmbAM4PI 1.0.0.9 | Not specified |
| CNA | AMD | AMD Ryzen Embedded 7000 Series Processors | unaffected EmbeddedAM5PI 1.0.0.4 | Not specified |
| CNA | AMD | AMD Ryzen Embedded V2000 Series Processors | unaffected EmbeddedPI-FP6_1.0.0.C | Not specified |
| CNA | AMD | AMD Ryzen Embedded V3000 Series Processors | unaffected Embedded-PI_FP7r2 1011 | Not specified |
| CNA | AMD | AMD EPYC Embedded 9005 Series Processors | unaffected EmbTurinPI-SP5_1.0.0.1 | Not specified |
| CNA | AMD | AMD Ryzen Embedded 8000 Series Processors | unaffected EmbeddedPhoenixPI-FP7r2_1.0.0.2 | Not specified |
| CNA | AMD | AMD Ryzen Embedded 9000 Series Processors | unaffected EmbeddedAM5PI 1.0.0.5 | Not specified |
| CNA | AMD | AMD Radeon RX 5000 Series Graphics Products | unaffected AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09) | Not specified |
| CNA | AMD | AMD Radeon PRO W5000 Series Graphics Products | unaffected AMD Software: PRO Edition 25.Q2 (25.10.10) | Not specified |
| CNA | AMD | AMD Radeon RX 6000 Series Graphics Products | unaffected AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09) | Not specified |
| CNA | AMD | AMD Radeon RX 7000 Series Graphics Products | unaffected AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09) | Not specified |
| CNA | AMD | AMD Radeon PRO W6000 Series Graphics Products | unaffected AMD Software: PRO Edition 25.Q2 (25.10.10) | Not specified |
| CNA | AMD | AMD Radeon PRO W7000 Series Graphics Products | unaffected AMD Software: PRO Edition 25.Q2 (25.10.10) | Not specified |
| CNA | AMD | AMD Instinct MI210 | unaffected AMDGPU Driver 25.10 | Not specified |
| CNA | AMD | AMD Instinct MI250 | unaffected AMDGPU Driver 25.10 | Not specified |
| CNA | AMD | AMD Instinct MI300A | unaffected AMDGPU Driver 25.10 | Not specified |
| CNA | AMD | AMD Instinct MI300X | unaffected AMDGPU Driver 25.10 | Not specified |
| CNA | AMD | AMD Instinct MI308 | unaffected AMDGPU Driver 25.10 | Not specified |
| CNA | AMD | AMD Instinct MI325X | unaffected AMDGPU Driver 25.10 | Not specified |
| CNA | AMD | AMD Radeon PRO V520 | unaffected Contact your AMD Customer Engineering representative | Not specified |
| CNA | AMD | AMD Radeon PRO V620 | unaffected Contact your AMD Customer Engineering representative | Not specified |
| CNA | AMD | AMD Radeon PRO V710 | unaffected Contact your AMD Customer Engineering representative | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.amd.com/en/resources/product-security/bulletin/AMD-SB-4018.html | [email protected] | www.amd.com | |
| www.amd.com/en/resources/product-security/bulletin/AMD-SB-6028.html | [email protected] | www.amd.com | |
| www.amd.com/en/resources/product-security/bulletin/AMD-SB-3057.html | [email protected] | www.amd.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.