CVE-2024-36345

Out‑of‑Bounds Read in AMD OverDrive SMM Module

Published May 15, 2026 CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Description
Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of confidentiality.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Title Out‑of‑Bounds Read in AMD OverDrive SMM Module
Type Values Removed Values Added
Description Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of confidentiality.
Weaknesses CWE-1274
References
Metrics cvssV4_0

{'score': 4.6, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

No data.

Weaknesses

Sources

Status
PUBLISHED
Assigner
AMD
Published
Updated
May 19, 2026, 9:02 PM
Reserved
May 23, 2024, 7:44 PM
Status
Awaiting Analysis
Published
May 15, 2026, 2:16 AM
Modified
Oct 27, 2026, 7:10 PM