PT-2026-42015 · Amd · Amd Epyc™ 4004+16

Published 2026-05-19 · Updated 2026-05-20 · CVE-2024-36343

Positive Technologies (AI Summary)

CVSS v4.0

4.6

Medium

Base vector

AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description Improper input validation in the System Management Mode (SMM) communications buffer allows a privileged attacker to perform an out-of-bounds read or write to a limited section of the Top of Memory Segment (TSEG) memory region. This could lead to a loss of confidentiality or integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-124

Related Identifiers

CVE-2024-36343

Affected Products

Amd Epyc™ 4004

Amd Epyc™ 4005

Amd Ryzen™ 6000 Series Processor With Radeon™ Graphics

Amd Ryzen™ 7000 Series Desktop Processors

Amd Ryzen 7040 Series Processors With Radeon Graphics

Amd Ryzen™ 7045 Series Mobile Processors With Radeon™ Graphics

Amd Ryzen™ 8000 Series Desktop Processors

Amd Ryzen™ 9000 Series Desktop Processors

Amd Ryzen™ 9000Hx Series Mobile Processors

Amd Ryzen™ Ai Max 300 Series Processors

Amd Ryzen™ Ai Max

Amd Ryzen™ Embedded 7000 Series Processors

Amd Ryzen™ Embedded 8000 Series Processors

Amd Ryzen™ Embedded 9000 Series Processors

Amd Ryzen™ Embedded V3000 Series Processors

Amd Ryzen™ Threadripper™ 7000 Processors

Amd Ryzen™ Threadripper™ Pro 7000 Wx-Series Processors

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-36343 · Security Note
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html · Note
• https://twitter.com/CVEnew/status/2056870177376014721 · Twitter Post
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-3030.html · Note
• https://t.me/CVEtracker/54289 · Telegram Post
• https://t.me/cveNotify/164221 · Telegram Post