Vulnerability Description
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to bypass SMM isolation potentially resulting in arbitrary code execution at the SMM level.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3014.html
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html
FAQ
What is CVE-2024-36354?
CVE-2024-36354 is a vulnerability with a CVSS score of 7.5 (HIGH). Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of T...
How severe is CVE-2024-36354?
CVE-2024-36354 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-36354?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.