Insufficient Parameter Sanitization in AMD Secure Processor TEE DrvSys
CVE-2024-36344

6.9MEDIUM

Key Information:

Vendor

Amd
Status
Amd Epyc™ 4004 Series Processors
Amd Epyc™ 9005 Series Processors
Amd Ryzen™ 4000 Series Mobile Processors With Radeon™ Graphics
Amd Ryzen™ 7035 Series Processors With Radeon™ Graphics
Vendor
CVE Published:
12 November 2026

What is CVE-2024-36344?

The vulnerability stems from inadequate sanitization of input parameters within the AMD Secure Processor's Trusted Execution Environment (TEE) driver's system interface. An attacker with local access to the TEE interface or associated Trusted Applications could exploit this weakness to execute out-of-bounds write operations. This may compromise platform integrity, leading to potential integrity loss or denial of service, thus impacting overall system security.

Affected Version(s)

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics PicassoPI-FP5_1.0.1.2c

AMD EPYC™ 4004 Series Processors ComboAM5PI_1.0.0.B

AMD EPYC™ 9005 Series Processors TurinPI 1.0.0.6

References

https://www.amd.com/en/resources/product-security/bulleti...
https://www.amd.com/en/resources/product-security/bulleti...
https://www.amd.com/en/resources/product-security/bulleti...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.