CVE-2024-36347
CVE-2024-36347
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.
CVSS 6.4 · Medium · EPSS 0.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
amd epyc™ 7001 series
- Versions
- NaplesPI 1.0.0.P: Not affected
No fix published
amd epyc™ 7002 series
- Versions
- RomePI 1.0.0.L: Not affected
No fix published
amd epyc™ 7003 series
- Versions
- MilanPI 1.0.0.F: Not affected
No fix published
amd epyc™ 9004 series
- Versions
- Genoa 1.0.0.E: Not affected
No fix published
amd epyc™ 4004 series
- Versions
- ComboAM5PI1.0.0.a: Not affected
- ComboAM5PI1.1.0.3c: Not affected
- ComboAM5PI1.2.0.3: Not affected
No fix published
amd epyc™ 9005 series
- Versions
- TurinPI 1.0.0.4: Not affected
No fix published
amd instinct™ mi300a
- Versions
- MI300PI_SR5 1.0.0.8: Not affected
No fix published
amd ryzen™ 5000 series desktop processors
- Versions
- ComboAM4v2PI 1.2.0.E: Not affected
No fix published
amd ryzen™ 5000 series desktop processor with radeon™ graphics
- Versions
- ComboAM4v2PI 1.2.0.E: Not affected
No fix published
amd ryzen™ 3000 series desktop processors
- Versions
- ComboAM4PI 1.0.0.D: Not affected
- ComboAM4v2PI 1.2.0.E: Not affected
No fix published
amd athlon™ 3000 series desktop processors with radeon™ graphics
- Versions
- ComboAM4PI 1.0.0.D: Not affected
- ComboAM4v2PI 1.2.0.E: Not affected
No fix published
amd ryzen™ 7000 series desktop processors
- Versions
- ComboAM5PI 1.0.0.a: Not affected
- ComboAM5PI 1.1.0.3c: Not affected
- ComboAM5PI 1.2.0.3: Not affected
No fix published
amd ryzen™ 4000 series desktop processor with radeon™ graphics
- Versions
- ComboAM4v2PI 1.2.0.E: Not affected
No fix published
amd ryzen™ 8000 series processor with radeon™ graphics
- Versions
- ComboAM5PI 1.1.0.3c: Not affected
- ComboAM5PI 1.2.0.3: Not affected
No fix published
amd ryzen™ 9000 series desktop processors
- Versions
- ComboAM5PI 1.2.0.3c: Not affected
No fix published
amd ryzen™ threadripper™ 3000 series processors
- Versions
- CastlePeakPI-SP3r3 1.0.0.E: Not affected
No fix published
amd ryzen™ threadripper™ pro 7000 wx-series processors
- Versions
- StormPeakPI-SP6 1.0.0.1k: Not affected
- StormPeakPI-SP6 1.1.0.0i: Not affected
No fix published
amd ryzen™ threadripper™ pro 3000wx series processors
- Versions
- ChagallWSPI-sWRX8 1.0.0.B: Not affected
- CastlePeakWSPI-sWRX8 1.0.0.g: Not affected
No fix published
amd ryzen™ threadripper™ pro 5000wx- series desktop processors
- Versions
- ChagallWSPI-sWRX8 1.0.0.B: Not affected
No fix published
amd athlon™ 3000 series mobile processors with radeon™ graphics
- Versions
- PicassoPI-FP5 1.0.1.2b: Not affected
No fix published
amd ryzen™ 3000 series mobile processor with radeon™ graphics
- Versions
- PicassoPI-FP5 1.0.1.2b: Not affected
No fix published
amd ryzen™ 4000 series mobile processors with radeon™ graphics
- Versions
- RenoirPI-FP6 1.0.0.Eb: Not affected
No fix published
amd ryzen™ 5000 series processors with radeon™ graphics
- Versions
- CezannePI-FP6 1.0.1.1b: Not affected
No fix published
amd ryzen™ 7020 series processors with radeon™ graphics
- Versions
- MendocinoPI-FT6 1.0.0.7b: Not affected
No fix published