CVE-2024-36344

Out-of-Bounds Write in AMD Secure Processor Due to Sanitization Flaw

Published Nov 12, 2026 CVSS 4.0 · 6.9 Medium EPSS n/a KEV · Not listed
Description
Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE DrvSys could allow an attacker with local access to the Trusted Execution Environment (TEE) interface or Trusted Application (TA) to cause an out-of-bounds write, potentially resulting in a loss of platform integrity or denial of service.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title Out-of-Bounds Write in AMD Secure Processor Due to Sanitization Flaw
Type Values Removed Values Added
Description Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE DrvSys could allow an attacker with local access to the Trusted Execution Environment (TEE) interface or Trusted Application (TA) to cause an out-of-bounds write, potentially resulting in a loss of platform integrity or denial of service.
Weaknesses CWE-191
References
Metrics cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N'}

Subscriptions

No data.

Weaknesses

Sources

Status
PUBLISHED
Assigner
AMD
Published
Updated
Nov 13, 2026, 12:16 AM
Reserved
May 23, 2024, 7:44 PM
Status
Awaiting Analysis
Published
Nov 12, 2026, 8:18 PM
Modified
Nov 13, 2026, 2:18 AM