Search vulnerabilities

Results 7

Export CSV
CVE-2024-36343

Out-of-Bounds Access in AMD System Management Mode Communication Buffer

Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a limited section of the Top of Memory Segment (TSEG) memory region, potentially resulting in loss of confidentiality or integrity.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Amd
CVE-2024-36311

A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow a privileged attacker to bypass input validation and perform an out of bounds read or write, potentially resulting in loss of confidentiality, integrity, or availability.