CVE-2024-36311
Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-02-10

Last updated on: 2026-02-10

Assigner: Advanced Micro Devices Inc.

Description
A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow a privileged attacker to bypass input validation and perform an out of bounds read or write, potentially resulting in loss of confidentiality, integrity, or availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-02-10
Last Modified
2026-02-10
Generated
2026-07-26
AI Q&A
2026-02-10
EPSS Evaluated
2026-07-25
NVD
CVE-2024-36311
EUVD
EUVD-2024-55411

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
amd athlon *
amd ryzen *
amd secure_processor *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-367 The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Time-of-check time-of-use (TOCTOU) race condition in the System Management Mode (SMM) communications buffer. It allows a privileged attacker to bypass input validation and perform out of bounds read or write operations.

Detection Guidance

I don't know

Impact Analysis

The vulnerability could lead to loss of confidentiality, integrity, or availability of the affected system.

Compliance Impact

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2024-36311. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart