CVE-2024-36344

medium

Description

Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE DrvSys could allow an attacker with local access to the Trusted Execution Environment (TEE) interface or Trusted Application (TA) to cause an out-of-bounds write, potentially resulting in a loss of platform integrity or denial of service.

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6028.html

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4018.html

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3057.html

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-55847

Details

Source: Mitre, NVD

Published: 2026-11-12

Updated: 2026-11-13

Risk Information

CVSS v2

Base Score: 3.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:P

Severity: Low

CVSS v3

Base Score: 7.1

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Severity: High

CVSS v4

Base Score: 6.9

Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N

Severity: Medium

EPSS

EPSS: 0.0016