p PatchFirst

CVE-2024-36347

CVE-2024-36347

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.

CVSS 6.4 · Medium · EPSS 0.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

Original sources

Check your server →