CVE-2024-36349

Advisory lineage Upstream: 0 Downstream: 15
Deferred
Published: 08 Jul 2025, 16:42
Last modified:09 Jul 2025, 14:00

Vulnerability Summary

Overall Risk (default)
low
15/100
CVSS Score
3.8 LOW
v3.1 (cve.org)
EPSS Score
0.07% LOW
0% probability +0.06%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

08 Jul 2025, 16:42
Published
Vulnerability first disclosed
09 Jul 2025, 14:00
Last Modified
Vulnerability information updated

Description

A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, potentially resulting in information leakage.

CVSS Metrics

  • v3.1•LOW•Score: 3.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

EPSS Trends

Current EPSS score: 0.07%• Percentile: 22%

Techniques & Countermeasures

  • CWE-1420•Exposure of Sensitive Information during Transient Execution

    A processor event or prediction may allow incorrect operations (or correct operations with incorrect data) to execute transiently, potentially exposing data over a covert channel.

Affected Systems

  • amd•amd athlon™ 3000 series desktop processors with radeon™ graphics

    all

  • amd•amd athlon™ 3000 series mobile processors with radeon™ graphics

    all

  • amd•amd epyc™ embedded 3000 series processors

    all

  • amd•amd epyc™ 4004 series processors

    all

  • amd•amd epyc™ 7002 series processors

    all

  • amd•amd epyc™ 7003 series processors

    all

  • amd•amd epyc™ 8004 series processors

    all

  • amd•amd epyc™ 9004 series processors

    all

  • amd•amd epyc™ 9v64h processor

    all

  • amd•amd epyc™ embedded 7002 series processors

    all

  • amd•amd epyc™ embedded 7003 series processors

    all

  • amd•amd epyc™ embedded 8004 series processors

    all

  • amd•amd epyc™ embedded 9004 series processors

    all

  • amd•amd ryzen™ embedded r1000 series processors

    all

  • amd•amd ryzen™ embedded r2000 series processors

    all

  • amd•amd ryzen™ embedded v1000 series processors

    all

  • amd•amd ryzen™ 3000 series desktop processors

    all

  • amd•amd ryzen™ 3000 series mobile processor with radeon™ graphics

    all

  • amd•amd ryzen™ 4000 series desktop processor with radeon™ graphics

    all

  • amd•amd ryzen™ 5000 series desktop processor with radeon™ graphics

    all

  • amd•amd ryzen™ 5000 series desktop processors

    all

  • amd•amd ryzen™ 6000 series processor with radeon™ graphics

    all

  • amd•amd ryzen™ 7000 series desktop processors

    all

  • amd•amd ryzen™ 7000 series mobile processors

    all

  • amd•amd ryzen™ 7000 series processors with radeon™ graphics

    all

  • amd•amd ryzen™ 7020 series processors with radeon™ graphics

    all

  • amd•amd ryzen™ 7035 series processor with radeon™ graphics

    all

  • amd•amd ryzen™ 7040 series processors with radeon™ graphics

    all

  • amd•amd ryzen™ 8000 series processor with radeon™ graphics

    all

  • amd•amd ryzen™ 8040 series mobile processors with radeon™ graphics

    all

  • amd•amd ryzen™ embedded 5000 series processors

    all

  • amd•amd ryzen™ embedded 7000 series processors

    all

  • amd•amd ryzen™ embedded v2000 series processors

    all

  • amd•amd ryzen™ embedded v3000 series processors

    all

  • amd•amd ryzen™ threadripper™ 3000 series processors

    all

  • amd•amd ryzen™ threadripper™ pro 3000wx series processors

    all

  • amd•amd ryzen™ threadripper™ pro 5000wx- series desktop processors

    all

  • amd•amd ryzen™ threadripper™ pro 7000 wx-series processors

    all

References (1)