CVE-2024-36345

Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of confidentiality.

Scoring

Severity

MEDIUM

CVSS base score

4.6

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

EPSS probability

0.11%

CWE

CWE-1274

Published

2026-05-15

Last modified

2026-05-19

Affected products

• AMD AMD EPYC™ 4004
• AMD AMD EPYC™ 4005
• AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
• AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
• AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
• AMD AMD Ryzen™ 7000 Series Desktop Processors
• AMD AMD Ryzen™ 7000 Series Desktop Processors
• AMD AMD Ryzen™ 7000 Series Desktop Processors

Weakness type

• CWE-1274

Related vulnerabilities

• CVE-2025-29950 — Improper input validation in system management mode (SMM) could allow a privileged attacker to...
• CVE-2025-4043 — Milesight UG65-868M-EA Improper Access Control for Volatile Memory Containing Boot Code
• CVE-2023-31345 — Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,...
• CVE-2022-2484
• CVE-2022-2482

Markdown version · Browse all CVEs