CVE-2024-36345

Description

Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of confidentiality.

Overview

State: PUBLISHED
Assigner (CNA): AMD
CVSS severity: MEDIUM
CVSS score: 4.6 / 10
CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Effective score: 4.6 / 10 MEDIUM source: CNA overview
CWE(s): CWE-1274
Reserved: 2024-05-23
Published: 2026-05-15 03:42 UTC
Last updated: 2026-05-15 15:29 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36345.json
Linked Threat: CVE-2024-36345 — CVE-2024-36345

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published: 2026-05-15 02:16:20 UTC
NVD last modified: 2026-06-17 07:36:32 UTC
EPSS score: 0.0011 (probability of exploitation in next 30 days)
EPSS percentile: 1.41% vs all CVEs — higher = more likely to be exploited, as of 2026-07-27

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2024-55585
Assigner: AMD
Published: May 15, 2026, 1:42:46 AM
Updated: May 19, 2026, 9:02:28 PM
EUVD base score (CVSS 4.0): 4.6 / 10
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EUVD-reported EPSS: 0.0200
Vendors: AMD
Products: AMD Ryzen™ AI 300 Series Processors (patch: StrixKrackanPI-FP8_1.1.0.0f)

AMD Ryzen™ 9000HX Series Mobile Processors (patch: FireRangeFL1PI 1.0.0.0f)

AMD Ryzen™ Embedded 9000 Series Processors (patch: EmbeddedAM5PI 1.0.0.7)

AMD EPYC™ 4005 (patch: ComboAM5 1.2.0.3j)

AMD Ryzen™ Embedded V3000 Series Processors (patch: Embedded-PI_FP7r2 1012)

AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors (patch: StormPeakPI-SP6 1.1.0.0k)

AMD Ryzen™ Embedded 7000 Series Processors (patch: EmbeddedAM5PI 1.0.0.7)

AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics (patch: PhoenixPI-FP8-FP7_1.2.0.0f)

AMD Ryzen™ 7000 Series Desktop Processors (patch: ComboAM5PI 1.1.0.3g)

AMD Ryzen™ 8000 Series Desktop Processors (patch: ComboAM5PI 1.2.0.3j)

AMD Ryzen™ 7000 Series Desktop Processors (patch: ComboAM5PI 1.2.0.3j)

AMD Ryzen™ 9000 Series Desktop Processors (patch: ComboAM5PI 1.2.0.3j)

AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors (patch: StormPeakPI-SP6 1.0.0.1m)

AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics (patch: RembrandtPI-FP7_1.0.0.Bg)

AMD EPYC™ 4004 (patch: ComboAM5PI 1.1.0.3d)

AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics (patch: DragonRangeFL1_1.0.0.3l)

AMD Ryzen™ AI 300 Series Processors (patch: StrixKrackanPI-FP8_1.1.0.2e)

AMD Ryzen™ Threadripper™ 7000 Processors (patch: StormPeakPI-SP6 1.1.0.0k)

AMD Ryzen™ 7000 Series Desktop Processors (patch: ComboAM5PI 1.0.0.e)

AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (patch: PhoenixPI-FP8-FP7_1.2.0.0f)

AMD Ryzen™ AI MAX (patch: StrixHaloPI-FP11_1.0.0.2b)

AMD Ryzen™ Embedded 8000 Series Processors (patch: EmbeddedPhoenixPI-FP7r2_1.0.0.4)

AMD Ryzen™ 8000 Series Desktop Processors (patch: ComboAM5PI 1.1.0.3g)
Aliases: GHSA-jqj3-2m78-576h

ENISA description: Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of confidentiality.

EUVD references (2)

Affected products (19)

Vendor	Product	Versions	Platforms
AMD	AMD EPYC™ 4004	`ComboAM5PI 1.1.0.3d` (unaffected)	—
AMD	AMD EPYC™ 4005	`ComboAM5 1.2.0.3j` (unaffected)	—
AMD	AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics	`RembrandtPI-FP7_1.0.0.Bg` (unaffected)	—
AMD	AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics	`PhoenixPI-FP8-FP7_1.2.0.0f` (unaffected)	—
AMD	AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics	`DragonRangeFL1_1.0.0.3l` (unaffected)	—
AMD	AMD Ryzen™ 7000 Series Desktop Processors	`ComboAM5PI 1.0.0.e` (unaffected), `ComboAM5PI 1.1.0.3g` (unaffected), `ComboAM5PI 1.2.0.3j` (unaffected)	—
AMD	AMD Ryzen™ 9000HX Series Mobile Processors	`FireRangeFL1PI 1.0.0.0f` (unaffected)	—
AMD	AMD Ryzen™ AI MAX	`StrixHaloPI-FP11_1.0.0.2b` (unaffected)	—
AMD	AMD Ryzen™ AI 300 Series Processors	`StrixKrackanPI-FP8_1.1.0.0f` (unaffected), `StrixKrackanPI-FP8_1.1.0.2e` (unaffected)	—
AMD	AMD Ryzen™ Threadripper™ 7000 Processors	`StormPeakPI-SP6 1.1.0.0k` (unaffected)	—
AMD	AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors	`StormPeakPI-SP6 1.0.0.1m` (unaffected), `StormPeakPI-SP6 1.1.0.0k` (unaffected)	—
AMD	AMD Ryzen™ 8000 Series Desktop Processors	`ComboAM5PI 1.1.0.3g` (unaffected), `ComboAM5PI 1.2.0.3j` (unaffected)	—
AMD	AMD Ryzen™ 9000 Series Desktop Processors	`ComboAM5PI 1.2.0.3j` (unaffected)	—
AMD	AMD Ryzen™ 9000 Series Desktop Processors	`ComboAM5PI 1.2.0.3j` (unaffected)	—
AMD	AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics	`PhoenixPI-FP8-FP7_1.2.0.0f` (unaffected)	—
AMD	AMD Ryzen™ Embedded 8000 Series Processors	`EmbeddedPhoenixPI-FP7r2_1.0.0.4` (unaffected)	—
AMD	AMD Ryzen™ Embedded V3000 Series Processors	`Embedded-PI_FP7r2 1012` (unaffected)	—
AMD	AMD Ryzen™ Embedded 7000 Series Processors	`EmbeddedAM5PI 1.0.0.7` (unaffected)	—
AMD	AMD Ryzen™ Embedded 9000 Series Processors	`EmbeddedAM5PI 1.0.0.7` (unaffected)	—

Vendor references (2)

References embedded in the original CVE record by the assigning CNA.

MITRE references (2) cveawg.mitre.org

Pulled from MITRE's CVE Services API by the 🛰 Backfill from MITRE button.

Web references (3)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

https://nvd.nist.gov/vuln/detail/CVE-2024-36345 tenable:nvd.nist.gov
https://www.cve.org/CVERecord?id=CVE-2024-36345 tenable:www.cve.org
https://www.first.org/epss/ tenable:www.first.org

NVD-tagged references (2)

Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3030.html psirt@amd.com
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html psirt@amd.com

Remediations (17)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

CVE-2024-6345 - Remote Code Execution in pypa/setuptools

web:cvefeed.io

A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed …

2026-05-23 20:49 UTC
Nvd - Cve-2024-6345

web:nvd.nist.gov

An official website of the United States government Here's how you know

2026-05-23 20:49 UTC
Security Update Guide - Microsoft

web:portal.msrc.microsoft.com

The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

2026-05-23 20:49 UTC
Android Security Bulletins - Android Open Source Project

web:source.android.com

This Section contains the available Android Security Bulletins, which provide fixes for possible issues affecting Android devices.

2026-05-23 20:49 UTC
Landing Page | ServiceNow Common Vulnerabilities & Exposures (CVE ...

web:support.servicenow.com

Overview The advisories below document publicly disclosed Common Vulnerabilities and Exposures ( CVEs ) in the Now Platform by ServiceNow. Because ServiceNow uses various methods to communicate vulnerability information, patches, and other fixes, customers should review family, security patch , and hotfix release notes, which are available at https://docs.servicenow.com, for a complete list of ...

2026-05-23 20:49 UTC
Google Translate

web:translate.google.com

Google's service, offered free of charge, instantly translates words, phrases, and web pages between English and over 100 other languages.

2026-05-23 20:49 UTC
IBM Support: Fix Central

web:www.ibm.com

IBM Support, Fix Central All code (including Machine Code updates, samples, fixes or other software downloads) provided on the Fix Central website is subject to the terms of the applicable license agreements. Machine Code updates for Power Systems and System Storage are available for IBM machines that are under warranty or an IBM hardware maintenance service agreement. Some exceptions apply ...

2026-05-23 20:49 UTC
Critical Patch Updates, Critical Security Patch Updates ... - Oracle

web:www.oracle.com

Critical Security Patch Updates Critical Security Patch Updates provide security patches for supported Oracle on-premises products. A Critical Security Patch Update provides targeted, high-priority security fixes in a smaller, more focused format, making them easier to apply with minimal disruption.

2026-05-23 20:49 UTC
Oracle April 2026 Critical Patch Update 241 CVEs | Tenable®

web:www.tenable.com

Oracle addresses 241 CVEs in its April Critical Patch Update, the second quarterly update of 2026 with 481 patches, including 34 critical updates.

2026-05-23 20:49 UTC
VirusTotal - Home

web:www.virustotal.com

VirusTotal is a platform for scanning files and URLs for viruses, malware, and other threats using multiple antivirus engines.

2026-05-23 20:49 UTC
Windows Kerberos RC4 deprecation: what will break in Active ... - 4sysops

web:4sysops.com

Starting in April 2026, Windows updates will change the default Kerberos ticket issuance behavior to AES-SHA1 for accounts without explicit encryption settings, while RC4 can still be used where explicitly enabled. This change, driven by CVE -2026-20833, affects every Windows Server environment where service accounts or devices still rely on RC4. Any service account, NAS device, or legacy ...

2026-05-26 02:56 UTC
Security Updates - Red Hat Customer Portal

web:access.redhat.com

Learn about our open source products, services, and company. You are here

2026-05-26 02:56 UTC
Adaptiva | The fastest way to patch and manage endpoints at scale

web:adaptiva.com

Accelerate the management and security of your devices with the most adaptive platform for Autonomous Endpoint Management.

2026-05-26 02:56 UTC
CISA Warns of Exploited Microsoft Defender 0-Day Flaws

web:cyberpress.org

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two actively exploited Microsoft Defender vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, issuing an urgent remediation directive for federal agencies with a due date of June 3, 2026.

2026-05-26 02:56 UTC
Security Update Guide - Microsoft

web:msrc.microsoft.com

The Microsoft Security Response Center (MSRC) investigates all reports of security vulnerabilities affecting Microsoft products and services, and provides the information here as part of the ongoing effort to help you manage security risks and help keep your systems protected.

2026-05-26 02:56 UTC
NVD - Search

web:nvd.nist.gov

Please make use of the interactive search interfaces to find information in the database!

2026-05-26 02:56 UTC
CVE: Common Vulnerabilities and Exposures

web:www.cve.org

At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures

2026-05-26 02:56 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2024-36345.json.

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-36345",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-15T13:18:17.243187Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T13:29:37.501Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 4004",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.1.0.3d"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 4005",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5 1.2.0.3j"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 6000 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "RembrandtPI-FP7_1.0.0.Bg"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7040 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PhoenixPI-FP8-FP7_1.2.0.0f"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7045 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "DragonRangeFL1_1.0.0.3l"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.0.0.e"
            },
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.1.0.3g"
            },
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.2.0.3j"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 9000HX Series Mobile Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "FireRangeFL1PI 1.0.0.0f"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 AI MAX",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "StrixHaloPI-FP11_1.0.0.2b"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 AI 300 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "StrixKrackanPI-FP8_1.1.0.0f"
            },
            {
              "status": "unaffected",
              "version": "StrixKrackanPI-FP8_1.1.0.2e"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 7000 Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "StormPeakPI-SP6 1.1.0.0k"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 7000 WX-Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "StormPeakPI-SP6 1.0.0.1m"
            },
            {
              "status": "unaffected",
              "version": "StormPeakPI-SP6 1.1.0.0k"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 8000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.1.0.3g"
            },
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.2.0.3j"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 9000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.2.0.3j"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 9000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.2.0.3j"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 8040 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PhoenixPI-FP8-FP7_1.2.0.0f"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded 8000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPhoenixPI-FP7r2_1.0.0.4"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V3000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Embedded-PI_FP7r2 1012"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded 7000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedAM5PI 1.0.0.7"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded 9000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedAM5PI 1.0.0.7"
            }
          ]
        }
      ],
      "datePublic": "2026-05-15T01:40:24.582Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of confidentiality.<br>"
            }
          ],
          "value": "Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of confidentiality."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1274",
              "description": "CWE-1274  Improper Access Control for Volatile Memory Containing Boot Code",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-15T01:42:46.649Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3030.html"
        },
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "AMD PSIRT Automation 1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2024-36345",
    "datePublished": "2026-05-15T01:42:46.649Z",
    "dateReserved": "2024-05-23T19:44:47.200Z",
    "dateUpdated": "2026-05-15T13:29:37.501Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}