Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%
Buy Us a Coffee

CVE-2024-36345

AI Predicted 4.9 Difficulty: Theoretical EPSS 0.02% · P4

Possible ATT&CK Techniques 1AI

T1564.001 · Hidden Files and Directories

Affected Version Matrix 24

VendorProductVersion RangeStatus
AMDAMD EPYC™ 4004ComboAM5PI 1.1.0.3dunaffected
AMDAMD EPYC™ 4005ComboAM5 1.2.0.3junaffected
AMDAMD Ryzen™ 6000 Series Processors with Radeon™ GraphicsRembrandtPI-FP7_1.0.0.Bgunaffected
AMDAMD Ryzen™ 7000 Series Desktop ProcessorsComboAM5PI 1.0.0.eunaffected
ComboAM5PI 1.1.0.3gunaffected
ComboAM5PI 1.2.0.3junaffected
AMDAMD Ryzen™ 7040 Series Mobile Processors with Radeon™ GraphicsPhoenixPI-FP8-FP7_1.2.0.0funaffected
AMDAMD Ryzen™ 7045 Series Mobile Processors with Radeon™ GraphicsDragonRangeFL1_1.0.0.3lunaffected
AMDAMD Ryzen™ 8000 Series Desktop ProcessorsComboAM5PI 1.1.0.3gunaffected
ComboAM5PI 1.2.0.3junaffected
AMDAMD Ryzen™ 8040 Series Mobile Processors with Radeon™ GraphicsPhoenixPI-FP8-FP7_1.2.0.0funaffected
AMDAMD Ryzen™ 9000 Series Desktop ProcessorsComboAM5PI 1.2.0.3junaffected
ComboAM5PI 1.2.0.3junaffected
AMDAMD Ryzen™ 9000HX Series Mobile ProcessorsFireRangeFL1PI 1.0.0.0funaffected
AMDAMD Ryzen™ AI 300 Series ProcessorsStrixKrackanPI-FP8_1.1.0.0funaffected
StrixKrackanPI-FP8_1.1.0.2eunaffected
AMDAMD Ryzen™ AI MAXStrixHaloPI-FP11_1.0.0.2bunaffected
AMDAMD Ryzen™ Embedded 7000 Series ProcessorsEmbeddedAM5PI 1.0.0.7unaffected
AMDAMD Ryzen™ Embedded 8000 Series ProcessorsEmbeddedPhoenixPI-FP7r2_1.0.0.4unaffected
AMDAMD Ryzen™ Embedded 9000 Series ProcessorsEmbeddedAM5PI 1.0.0.7unaffected
AMDAMD Ryzen™ Embedded V3000 Series ProcessorsEmbedded-PI_FP7r2 1012unaffected
AMDAMD Ryzen™ Threadripper™ 7000 ProcessorsStormPeakPI-SP6 1.1.0.0kunaffected
AMDAMD Ryzen™ Threadripper™ PRO 7000 WX-Series ProcessorsStormPeakPI-SP6 1.0.0.1munaffected
StormPeakPI-SP6 1.1.0.0kunaffected
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2024-36345

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of confidentiality.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
CWE-1274
Source: NVD (National Vulnerability Database)
Vulnerability Title
AMD OverDrive 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AMD OverDrive是美国超威半导体（AMD）公司的一款支持管理、配置CPU、GPU和RAM超频设置的工具。 AMD OverDrive存在安全漏洞，该漏洞源于输入验证不当，可能导致特权攻击者进行越界读取，从而造成机密性损失。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
AMDAMD EPYC™ 4004 ComboAM5PI 1.1.0.3d -
AMDAMD EPYC™ 4005 ComboAM5 1.2.0.3j -
AMDAMD Ryzen™ 6000 Series Processors with Radeon™ Graphics RembrandtPI-FP7_1.0.0.Bg -
AMDAMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics PhoenixPI-FP8-FP7_1.2.0.0f -
AMDAMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics DragonRangeFL1_1.0.0.3l -
AMDAMD Ryzen™ 7000 Series Desktop Processors ComboAM5PI 1.0.0.e -
AMDAMD Ryzen™ 9000HX Series Mobile Processors FireRangeFL1PI 1.0.0.0f -
AMDAMD Ryzen™ AI MAX StrixHaloPI-FP11_1.0.0.2b -
AMDAMD Ryzen™ AI 300 Series Processors StrixKrackanPI-FP8_1.1.0.0f -
AMDAMD Ryzen™ Threadripper™ 7000 Processors StormPeakPI-SP6 1.1.0.0k -
AMDAMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors StormPeakPI-SP6 1.0.0.1m -
AMDAMD Ryzen™ 8000 Series Desktop Processors ComboAM5PI 1.1.0.3g -
AMDAMD Ryzen™ 9000 Series Desktop Processors ComboAM5PI 1.2.0.3j -
AMDAMD Ryzen™ 9000 Series Desktop Processors ComboAM5PI 1.2.0.3j -
AMDAMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics PhoenixPI-FP8-FP7_1.2.0.0f -
AMDAMD Ryzen™ Embedded 8000 Series Processors EmbeddedPhoenixPI-FP7r2_1.0.0.4 -
AMDAMD Ryzen™ Embedded V3000 Series Processors Embedded-PI_FP7r2 1012 -
AMDAMD Ryzen™ Embedded 7000 Series Processors EmbeddedAM5PI 1.0.0.7 -
AMDAMD Ryzen™ Embedded 9000 Series Processors EmbeddedAM5PI 1.0.0.7 -

II. Public POCs for CVE-2024-36345

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-36345

请登录查看更多情报信息。

Vendor Advisories for CVE-2024-36345 (1)

Same Patch Batch · AMD · 2026-05-15 · 39 CVEs total

CVE-2025-48513AMD Chipset 安全漏洞
CVE-2021-26380AMD Graphics Driver 输入验证错误漏洞
CVE-2025-0040AMD Processors 访问控制错误漏洞
CVE-2024-21962AMD RAID Driver 安全漏洞
CVE-2025-29935AMD Chipset 缓冲区错误漏洞
CVE-2025-29944AMD Ryzen 安全漏洞
CVE-2025-29938AMD多款产品 安全漏洞
CVE-2025-29937AMD Processors 缓冲区错误漏洞
CVE-2025-0028AMD Chipset 安全漏洞
CVE-2025-29936AMD多款产品 输入验证错误漏洞
CVE-2022-23826AMD Processors 安全漏洞
CVE-2025-52540AMD Chipset 缓冲区错误漏洞
CVE-2025-48520AMD多款产品 缓冲区错误漏洞
CVE-2025-48519AMD Chipset 缓冲区错误漏洞
CVE-2025-0045AMD Secure Processor 安全漏洞
CVE-2026-0432AMD Chipset 安全漏洞
CVE-2025-48521AMD Processors 资源管理错误漏洞
CVE-2025-48512AMD Chipset 安全漏洞
CVE-2026-0438AMD Chipset 安全漏洞
CVE-2023-31309AMD Radeon 输入验证错误漏洞

Showing top 20 of 39 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: AMD EPYC™ 4004
Same vendor: AMD
Same weakness: CWE-1274

V. Comments for CVE-2024-36345

No comments yet

Leave a comment