VULNERABILITY INTELLIGENCE
CVE-2024-36311
EPSS probability0.14%
CISA KEVNot currently listed
Published2026-02-10
Last modified2026-06-17
Description
A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow a privileged attacker to bypass input validation and perform an out of bounds read or write, potentially resulting in loss of confidentiality, integrity, or availability.
Weakness classification
- psirt@amd.com: CWE-367