Vulnerability · Published Feb 10, 2026 · Assigned by AMD

CVE-2024-36355

High 7.0

In plain English

A high-severity out-of-bounds write in AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics from AMD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).

Severity (CVSS 4.0)7.0High
Exploit odds (30 days)0.2%top 93.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (sleep) wake up, potentially resulting in arbitrary code execution.

Affected products (as reported)

VendorProductVersions
AMD AMD EPYC™ 9004 Series Processors see references
AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors see references
AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors see references
AMD AMD Ryzen™ Z1 Series Processors see references
AMD AMD Ryzen™ 9000 Series Desktop Processors see references
AMD AMD Ryzen™ 7000 Series Desktop Processors see references
AMD AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 3000 Series Desktop Processors see references
AMD AMD Ryzen™ 8000 Series Desktop Processors see references
AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ Threadripper™ 7000 processor see references
AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series processors see references
AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 8000 Series Desktop see references
AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics see references
AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 4000 Series Desktop Processors see references
AMD AMD Ryzen™ 5000 Series Desktop Processors see references
AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors see references
AMD AMD Ryzen™ Z2 Series Processors see references
AMD AMD Ryzen™ Z2 Series Processors Go see references
AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa") see references
AMD AMD Ryzen™ Embedded R1000 Series Processors see references
AMD AMD Ryzen™ Embedded R2000 Series Processors see references
AMD AMD Ryzen™ Embedded 5000 Series Processors see references

Weakness: CWE-787 · Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H

References