VULNERABILITY INTELLIGENCE

CVE-2024-36345

EPSS probability0.11%
CISA KEVNot currently listed
Published2026-05-15
Last modified2026-10-27

Description

Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of confidentiality.

Weakness classification

  • psirt@amd.com: CWE-1274

Primary references