Riskcovery

CVE-2024-36355

State
Published
Severity
7.0 High
Published
Feb 10, 2026
Updated
Feb 26, 2026
Reserved
May 23, 2024

Read the record on cve.org

Description

Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (sleep) wake up, potentially resulting in arbitrary code execution.

Scores

CVSSScoreVectorSource
4.07.0 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:HAMD

Weaknesses

Affected Products

ProductVersions
AMD EPYC™ 9004 Series ProcessorsAMD
  • GenoaPI 1.0.0.ENot affected
AMD Ryzen™ Threadripper™ PRO 5000 WX-Series ProcessorsAMD
  • ChagallWSPI-sWRX8-1.0.0.BNot affected
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsAMD
  • CezannePI-FP6_1.0.1.1bNot affected
AMD Ryzen™ Threadripper™ PRO 3000 WX-Series ProcessorsAMD
  • CastlePeakWSPI-sWRX8 1.0.0.GNot affected
  • ChagallWSPI-sWRX8-1.0.0.BNot affected
AMD Ryzen™ Z1 Series ProcessorsAMD
  • ComboAM5 1.1.0.3c / ComboAM5 1.2.0.3dNot affected
AMD Ryzen™ 9000 Series Desktop ProcessorsAMD
  • ComboAM5 1.2.0.3dNot affected
AMD Ryzen™ 7000 Series Desktop ProcessorsAMD
  • ComboAM5 1.2.0.3dNot affected
  • ComboAM5 1.1.0.3cNot affected
  • ComboAM5PI 1.0.0.ENot affected
AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD
  • PicassoPI-FP5_1.0.1.2cNot affected
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ GraphicsAMD
  • ComboAM4v2PI 1.2.0.10Not affected
AMD Ryzen™ 3000 Series Desktop ProcessorsAMD
  • ComboAM4PI 1.0.0.10Not affected
  • ComboAM4v2PI 1.2.0.10Not affected
AMD Ryzen™ 8000 Series Desktop ProcessorsAMD
  • ComboAM5 1.1.0.3cNot affected
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ GraphicsAMD
  • PhoenixPI-FP8-FP7_1.2.0.0cNot affected
AMD Ryzen™ Threadripper™ 7000 processorAMD
  • StormPeakPI-SP6 1.1.0.0iNot affected
AMD Ryzen™ Threadripper™ PRO 7000 WX-Series processorsAMD
  • StormPeakPI-SP6 1.0.0.1k / StormPeakPI-SP6 1.1.0.0iNot affected
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ GraphicsAMD
  • PhoenixPI-FP8-FP7_1.2.0.0cNot affected
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsAMD
  • RenoirPI-FP6 1.0.0.EbNot affected
AMD Ryzen™ 6000 Series Processors with Radeon™ GraphicsAMD
  • RembrandtPI-FP7_1.0.0.BbNot affected
AMD Ryzen™ 8000 Series DesktopAMD
  • ComboAM5 1.2.0.3dNot affected
AMD Ryzen™ 7020 Series Processors with Radeon™ GraphicsAMD
  • MendocinoPI-FT6_1.0.0.7bNot affected
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ GraphicsAMD
  • DragonRangeFL1_1.0.0.3gNot affected
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD
  • PicassoPI-FP5_1.0.1.2cNot affected
AMD Ryzen™ 4000 Series Desktop ProcessorsAMD
  • ComboAM4v2PI 1.2.0.10Not affected
AMD Ryzen™ 5000 Series Desktop ProcessorsAMD
  • ComboAM4v2PI 1.2.0.10Not affected
AMD Ryzen™ Threadripper™ PRO 7000 WX-Series ProcessorsAMD
  • StormPeakPI-SP6 1.1.0.0iNot affected
AMD Ryzen™ Z2 Series ProcessorsAMD
  • PhoenixPI-FP8-FP7_1.2.0.0cNot affected
AMD Ryzen™ Z2 Series Processors GoAMD
  • RembrandtPI-FP7_1.0.0.BbNot affected
AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")AMD
  • EmbGenoaPI-SP5 1.0.0.BNot affected
AMD Ryzen™ Embedded R1000 Series ProcessorsAMD
  • EmbeddedPI-FP5 1211Not affected
AMD Ryzen™ Embedded R2000 Series ProcessorsAMD
  • EmbeddedR2KPI-FP5 1006Not affected
AMD Ryzen™ Embedded 5000 Series ProcessorsAMD
  • EmbAM4PI 1008Not affected
AMD Ryzen™ Embedded 7000 Series ProcessorsAMD
  • EmbeddedAM5PI 1.0.0.4​Not affected
AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")AMD
  • EmbeddedPI-FP5 1211Not affected
AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso")AMD
  • EmbeddedPI-FP5 1211Not affected
AMD Ryzen™ Embedded V2000 Series ProcessorsAMD
  • EmbeddedPI-FP6_1.0.0.BNot affected
AMD Ryzen™ Embedded V3000 Series ProcessorsAMD
  • Embedded-PI_FP7r2 100FNot affected
AMD Ryzen™ Embedded 8000 Series ProcessorsAMD
  • EmbeddedPhoenixPI-FP7r2_1.0.0.2Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.