CVE-2024-36349

State
Published
Severity
3.8 Low
Published
Jul 8, 2025
Updated
Jul 9, 2025
Reserved
May 23, 2024

Read the record on cve.org

Description

A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, potentially resulting in information leakage.

Scores

CVSSScoreVectorSource
3.13.8 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:NAMD

Weaknesses

  • CWE-1420 Exposure of Sensitive Information during Transient Execution

Affected Products

ProductVersions
AMD EPYC™ 7002 Series ProcessorsAMD
  • allAffected
AMD EPYC™ 7003 Series ProcessorsAMD
  • allAffected
AMD EPYC™ 9004 Series ProcessorsAMD
  • allAffected
AMD EPYC™ 8004 Series ProcessorsAMD
  • allAffected
AMD EPYC™ 4004 Series ProcessorsAMD
  • allAffected
AMD EPYC™ 9V64H ProcessorAMD
  • allAffected
AMD Ryzen™ 5000 Series Desktop ProcessorsAMD
  • allAffected
AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ GraphicsAMD
  • allAffected
AMD Ryzen™ 3000 Series Desktop ProcessorsAMD
  • allAffected
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ GraphicsAMD
  • allAffected
AMD Ryzen™ 7000 Series Desktop ProcessorsAMD
  • allAffected
AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ GraphicsAMD
  • allAffected
AMD Ryzen™ 8000 Series Processor with Radeon™ GraphicsAMD
  • allAffected
AMD Ryzen™ Threadripper™ 3000 Series ProcessorsAMD
  • allAffected
AMD Ryzen™ Threadripper™ PRO 7000 WX-Series ProcessorsAMD
  • allAffected
AMD Ryzen™ Threadripper™ PRO 3000WX Series ProcessorsAMD
  • allAffected
AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop ProcessorsAMD
  • allAffected
AMD Ryzen™ 7020 Series Processors with Radeon™ GraphicsAMD
  • allAffected
AMD Ryzen™ 6000 Series Processor with Radeon™ GraphicsAMD
  • allAffected
AMD Ryzen™ 7035 Series Processor with Radeon™ GraphicsAMD
  • allAffected
AMD Ryzen™ 7000 Series Processors with Radeon™ GraphicsAMD
  • allAffected
AMD Ryzen™ 7040 Series Processors with Radeon™ GraphicsAMD
  • allAffected
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ GraphicsAMD
  • allAffected
AMD Ryzen™ 7000 Series Mobile ProcessorsAMD
  • allAffected
AMD EPYC™ Embedded 7002 Series ProcessorsAMD
  • allAffected
AMD EPYC™ Embedded 7003 Series ProcessorsAMD
  • allAffected
AMD EPYC™ Embedded 8004 Series ProcessorsAMD
  • allAffected
AMD EPYC™ Embedded 9004 Series ProcessorsAMD
  • allAffected
AMD Ryzen™ Embedded 5000 Series ProcessorsAMD
  • allAffected
AMD Ryzen™ Embedded 7000 Series ProcessorsAMD
  • allAffected
AMD Ryzen™ Embedded V2000 Series ProcessorsAMD
  • allAffected
AMD Ryzen™ Embedded V3000 Series ProcessorsAMD
  • allAffected
AMD EPYC™ 7002 Series ProcessorsAMD
  • allAffected
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD
  • allAffected
AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ GraphicsAMD
  • allAffected
AMD Ryzen™ 7000 Series Mobile ProcessorsAMD
  • allAffected
AMD EPYC™ Embedded 3000 Series ProcessorsAMD
  • allAffected
AMD Ryzen™ Embedded R1000 Series ProcessorsAMD
  • allAffected
AMD Ryzen™ Embedded R2000 Series ProcessorsAMD
  • allAffected
AMD Ryzen™ Embedded V1000 Series ProcessorsAMD
  • allAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.