CVE-2024-36354

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Sep 6, 2025
Source updated: Feb 26, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to bypass SMM isolation potentially resulting in arbitrary code execution at the SMM level.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

AMD Ryzen™ Threadripper™ 3000 Processors

Vendor: AMD
Product: AMD Ryzen™ Threadripper™ 3000 Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Threadripper™ 3000 Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
CastlePeakPI-SP3r3 1.0.0.D	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors

Vendor: AMD
Product: AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ChagallWSPI-sWRX8-1.0.0.A	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
CezannePI-FP6_1.0.1.1a	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors

Vendor: AMD
Product: AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
CastlePeakWSPI-sWRX8 1.0.0.F	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors

Vendor: AMD
Product: AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ChagallWSPI-sWRX8-1.0.0.A	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
PicassoPI-FP5_1.0.1.2a	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
PhoenixPI-FP8-FP7_1.1.8.0	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
PicassoPI-FP5_1.0.1.2a	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 8000 Series Desktop Processors

Vendor: AMD
Product: AMD Ryzen™ 8000 Series Desktop Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ 8000 Series Desktop Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM5PI_1.2.0.2a	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
PhoenixPI-FP8-FP7_1.1.8.0	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
RenoirPI-FP6 1.0.0.Ea	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
RembrandtPI-FP7_1.0.0.Ba	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
DragonRangeFL1_1.0.0.3f	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
RembrandtPI-FP7_1.0.0.Ba	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 7000 Series Desktop Processors

Vendor: AMD
Product: AMD Ryzen™ 7000 Series Desktop Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ 7000 Series Desktop Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM5PI_1.2.0.2a	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
CezannePI-FP6_1.0.1.1a	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 9000 Series Desktop Processors

Vendor: AMD
Product: AMD Ryzen™ 9000 Series Desktop Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ 9000 Series Desktop Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM5PI_1.2.0.2a	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 3000 Series Desktop Processors

Vendor: AMD
Product: AMD Ryzen™ 3000 Series Desktop Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ 3000 Series Desktop Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM4PI_1.0.0.C	`unaffected`	Unavailable	Unavailable	Unavailable	None listed
ComboAM4v2PI_1.2.0.D	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM4PI_1.0.0.C	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM4v2PI_1.2.0.D	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 4000 Series Desktop Processors

Vendor: AMD
Product: AMD Ryzen™ 4000 Series Desktop Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ 4000 Series Desktop Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM4v2PI_1.2.0.D	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 5000 Series Desktop Processors

Vendor: AMD
Product: AMD Ryzen™ 5000 Series Desktop Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ 5000 Series Desktop Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM4v2PI_1.2.0.D	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ Embedded 3000 Series Processors

Vendor: AMD
Product: AMD EPYC™ Embedded 3000 Series Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ Embedded 3000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
SnowyOwl PI 1.1.0.F	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ Embedded 7002 Series Processors

Vendor: AMD
Product: AMD EPYC™ Embedded 7002 Series Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ Embedded 7002 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbRomePI-SP3_1.0.0.E	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ Embedded 7003 Series Processors

Vendor: AMD
Product: AMD EPYC™ Embedded 7003 Series Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ Embedded 7003 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbMilanPI-SP3 1.0.0.A	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ Embedded 9004 Series Processors

Vendor: AMD
Product: AMD EPYC™ Embedded 9004 Series Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ Embedded 9004 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbGenoaPI-SP5 1.0.0.8	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded 5000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Embedded 5000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded 5000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbAM4PI 1.0.0.7	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded V2000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Embedded V2000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded V2000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbeddedPI-FP6_1.0.0.B	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded V3000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Embedded V3000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded V3000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Embedded-PI_FP7r2 100A	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ Embedded 97X4 Series Processors

Vendor: AMD
Product: AMD EPYC™ Embedded 97X4 Series Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ Embedded 97X4 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbGenoaPI-SP5 1.0.0.8	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded 7000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Embedded 7000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded 7000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbeddedAM5PI 1.0.0.3	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ 9004 Series Processors

Vendor: AMD
Product: AMD EPYC™ 9004 Series Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ 9004 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
GenoaPI 1.0.0.D	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ 7003 Series Processors

Vendor: AMD
Product: AMD EPYC™ 7003 Series Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ 7003 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
MilanPI 1.0.0.D	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ 7002 Series Processors

Vendor: AMD
Product: AMD EPYC™ 7002 Series Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ 7002 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Rome PI 1.0.0.M	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ 7001 Series Processors

Vendor: AMD
Product: AMD EPYC™ 7001 Series Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ 7001 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Naples 1.0.0.Q	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ 9004 Series Processors

Vendor: AMD
Product: AMD EPYC™ 9004 Series Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ 9004 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
GenoaPI 1.0.0.D	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ 4004 Series Processors

Vendor: AMD
Product: AMD EPYC™ 4004 Series Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ 4004 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM5PI_1.2.0.2a	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ 8004 Series Processors

Vendor: AMD
Product: AMD EPYC™ 8004 Series Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ 8004 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
GenoaPI 1.0.0.D	`unaffected`	Unavailable	Unavailable	Unavailable	None listed