Buffer overflow in AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics
CVE-2024-36355
Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (sleep) wake up, potentially resulting in arbitrary code execution.
Vulnerability class: Buffer Overflow
Published · last modified .
EPSS exploit prediction
EPSS: 0.002 (6.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 6th percentile — 6.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: +0.000
Affected products
- AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics — versions PicassoPI-FP5_1.0.1.2c
- AMD Epyc™ 9004 Series Processors — versions GenoaPI 1.0.0.E
- AMD Epyc™ Embedded 9004 Series Processors (Formerly Codenamed "Genoa") — versions EmbGenoaPI-SP5 1.0.0.B
- AMD Ryzen™ 3000 Series Desktop Processors — versions ComboAM4PI 1.0.0.10, ComboAM4v2PI 1.2.0.10
- AMD Ryzen™ 3000 Series Mobile Processors With Radeon™ Graphics — versions PicassoPI-FP5_1.0.1.2c
- AMD Ryzen™ 4000 Series Desktop Processors — versions ComboAM4v2PI 1.2.0.10
- AMD Ryzen™ 4000 Series Mobile Processors With Radeon™ Graphics — versions RenoirPI-FP6 1.0.0.Eb
- AMD Ryzen™ 5000 Series Desktop Processors — versions ComboAM4v2PI 1.2.0.10
- AMD Ryzen™ 5000 Series Desktop Processors With Radeon™ Graphics — versions ComboAM4v2PI 1.2.0.10
- AMD Ryzen™ 5000 Series Mobile Processors With Radeon™ Graphics — versions CezannePI-FP6_1.0.1.1b