CVE-2024-36311

State: Published
Severity: 4.6 Medium
Published: Feb 10, 2026
Updated: Feb 10, 2026
Reserved: May 23, 2024

Description

A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow a privileged attacker to bypass input validation and perform an out of bounds read or write, potentially resulting in loss of confidentiality, integrity, or availability.

Scores

CVSS	Score	Vector	Source
4.0	4.6 Medium	CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N	AMD

Weaknesses

CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

Affected Products

Product	Versions
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ GraphicsAMD	DragonRangeFL1PI 1.0.0.3hNot affected
AMD Ryzen™ 7000 Series Desktop ProcessorsAMD	ComboAM5PI 1.0.0.bNot affected ComboAM5PI 1.1.0.3dNot affected ComboAM5PI 1.2.0.3dNot affected
AMD Ryzen™ 9000HX Series Mobile ProcessorsAMD	FireRangeFL1PI 1.0.0.0aNot affected
AMD Ryzen™ 8000 Series Desktop ProcessorsAMD	ComboAM5PI 1.1.0.3dNot affected ComboAM5PI 1.2.0.3dNot affected
AMD Ryzen™ 9000 Series Desktop ProcessorsAMD	ComboAM5PI 1.2.0.3dNot affected
AMD Ryzen™ Embedded 7000 Series ProcessorsAMD	EmbeddedAM5PI 1.0.0.4Not affected

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.