Riskcovery

CVE-2024-36350

State
Published
Severity
5.6 Medium
Published
Jul 8, 2025
Updated
Nov 4, 2025
Reserved
May 23, 2024

Read the record on cve.org

Description

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information.

Scores

CVSSScoreVectorSource
3.15.6 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:NAMD

Weaknesses

  • CWE-1421 Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution

Affected Products

ProductVersions
AMD EPYC™ 7003 Series ProcessorsAMD
  • MilanPI 1.0.0.G + OS UpdatesNot affected
AMD EPYC™ 9004 Series ProcessorsAMD
  • GenoaPI 1.0.0.E + OS UpdatesNot affected
AMD EPYC™ 8004 Series ProcessorsAMD
  • GenoaPI 1.0.0.E + OS UpdatesNot affected
AMD EPYC™ 9V64H ProcessorAMD
  • MI300PI 1.0.0.7 + OS UpdatesNot affected
AMD Ryzen™ 5000 Series Desktop ProcessorsAMD
  • ComboAM4v2PI 1.2.0.E + OS UpdatesNot affected
AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ GraphicsAMD
  • ComboAM4v2PI 1.2.0.E + OS UpdatesNot affected
AMD Ryzen™ 7000 Series Desktop ProcessorsAMD
  • ComboAM5PI 1.2.0.3 + OS UpdatesNot affected
  • ComboAM5PI 1.0.0.a+ OS UpdatesNot affected
  • ComboAM5PI 1.1.0.3c+ OS UpdatesNot affected
AMD Ryzen™ 8000 Series Processor with Radeon™ GraphicsAMD
  • ComboAM5PI 1.2.0.3 + OS UpdatesNot affected
  • ComboAM5PI 1.1.0.3c+ OS UpdatesNot affected
AMD Ryzen™ Threadripper™ PRO 7000 WX-Series ProcessorsAMD
  • StormPeakPI-SP6 1.1.0.0i + OS UpdatesNot affected
  • StormPeakPI-SP6 1.0.0.1k + OS UpdatesNot affected
AMD Ryzen™ 6000 Series Processor with Radeon™ GraphicsAMD
  • RembrandtPI-FP7 1.0.0.Bb + OS UpdatesNot affected
AMD Ryzen™ 7035 Series Processor with Radeon™ GraphicsAMD
  • RembrandtPI-FP7 1.0.0.Bb + OS UpdatesNot affected
AMD Ryzen™ 7000 Series Processors with Radeon™ GraphicsAMD
  • CezannePI-FP6 1.0.1.1b + OS UpdatesNot affected
AMD Ryzen™ 7040 Series Processors with Radeon™ GraphicsAMD
  • PhoenixPI-FP8-FP7 1.2.0.0 + OS UpdatesNot affected
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ GraphicsAMD
  • PhoenixPI-FP8-FP7 1.2.0.0 + OS UpdatesNot affected
AMD Ryzen™ 7000 Series Mobile ProcessorsAMD
  • DragonRangeFL1 1.0.0.3g + OS UpdatesNot affected
AMD EPYC™ Embedded 7003 Series ProcessorsAMD
  • EmbMilanPI-SP3 1.0.0.A + OS updatesNot affected
AMD EPYC™ Embedded 8004 Series ProcessorsAMD
  • EmbGenoaPI-SP5 1.0.0.9 + OS updatesNot affected
AMD EPYC™ Embedded 9004 Series ProcessorsAMD
  • EmbGenoaPI-SP5 1.0.0.9 + OS updatesNot affected
AMD Ryzen™ Embedded 5000 Series ProcessorsAMD
  • EmbAM4PI 1.0.0.7 + OS UpdateNot affected
AMD Ryzen™ Embedded 7000 Series ProcessorsAMD
  • EmbeddedAM5PI 1.0.0.3 + OS updatesNot affected
AMD Ryzen™ Embedded V3000 Series ProcessorsAMD
  • Embedded-PI_FP7r2 100C + OS updatesNot affected
AMD EPYC™ Embedded 97X4AMD
  • EmbGenoaPI-SP5 1.0.0.9 + OS updatesNot affected
AMD Ryzen™ 5000 Series Processors with Radeon™ GraphicsAMD
  • CezannePI-FP6 1.0.1.1b + OS UpdatesNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.