CVE-2024-36354 | AMD Ryzen Threadripper 3000 Processors SPD input validation

A vulnerability, which was classified as critical, has been found in AMD Ryzen Threadripper 3000 Processors, Ryzen Threadripper PRO 5000 WX-Series Processors, Ryzen 5000 Mobile Processors with Radeon Graphics, Ryzen Threadripper PRO 3000 WX-Series Processors, Ryzen 3000 Mobile Processors with Radeon Graphics, Ryzen 8040 Mobile Processors with Radeon Graphics, Athlon 3000 Mobile Processors with Radeon Graphics, Ryzen 8000 Desktop Processors, Ryzen 7040 Mobile Processors with Radeon Graphics, Ryzen 4000 Mobile Processors with Radeon Graphics, Ryzen 6000 Processors with Radeon Graphics, Ryzen 7045 Mobile Processors with Radeon Graphics, Ryzen 7035 Processors with Radeon Graphics, Ryzen 7000 Desktop Processors, Ryzen 7030 Mobile Processors with Radeon Graphics, Ryzen 9000 Desktop Processors, Ryzen 3000 Desktop Processors, Athlon 3000 Desktop Processors with Radeon Graphics, Ryzen 5000 Desktop Processors with Radeon Graphics, Ryzen 4000 Desktop Processors, Ryzen 5000 Desktop Processors, EPYC Embedded 3000 Processors, EPYC Embedded 7002 Processors, EPYC Embedded 7003 Processors, EPYC Embedded 9004 Processors, Ryzen Embedded 5000 Processors, Ryzen Embedded V2000 Processors, Ryzen Embedded V3000 Processors, EPYC Embedded 97X4 Processors, Ryzen Embedded 7000 Processors, EPYC 9004 Processors, EPYC 7003 Processors, EPYC 7002 Processors, EPYC 7001 Processors, EPYC 4004 Processors and EPYC 8004 Processors. The impacted element is an unknown function of the component SPD. This manipulation causes improper input validation.

This vulnerability is handled as CVE-2024-36354. It is possible to launch the attack on the local host. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More