Authorization Bypass Vulnerability in AMD RomArmor
CVE-2024-36326

8.4HIGH

Key Information:

Vendor

Amd
Status
Amd Ryzen™ 7040 Series Mobile Processors With Radeon™ Graphics
Amd Ryzen™ Ai 300 Series Processors
Vendor
CVE Published:
6 September 2025

What is CVE-2024-36326?

An authorization bypass vulnerability in AMD RomArmor has been identified, which may allow attackers to circumvent essential protections during system resume from a standby state. This flaw poses risks to the confidentiality and integrity of sensitive data, enabling unauthorized access and potential system manipulation. It is crucial for users to assess their systems and apply recommended security measures as outlined by the vendor.

Affected Version(s)

AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics PhoenixPI-FP8-FP7_1.1.8.0

AMD Ryzen™ AI 300 Series Processors StrixKrackanPI-FP8_1.1.0.0

References

https://www.amd.com/en/resources/product-security/bulleti...

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2024-36326 : Authorization Bypass Vulnerability in AMD RomArmor