CVE-2024-36311

Medium

Description

A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow a privileged attacker to bypass input validation and perform an out of bounds read or write, potentially resulting in loss of confidentiality, integrity, or availability.

SeverityMedium
CVSS4.6
Exploit probability—
ProductAMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
PublishedFeb 10, 2026
First seenFeb 10, 2026
Weakness typeCWE-367CWE-367

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ GraphicsNo range specified—
AMD AMD Ryzen™ 7000 Series Desktop ProcessorsNo range specified—
AMD AMD Ryzen™ 9000HX Series Mobile ProcessorsNo range specified—
AMD AMD Ryzen™ 8000 Series Desktop ProcessorsNo range specified—
AMD AMD Ryzen™ 9000 Series Desktop ProcessorsNo range specified—
AMD AMD Ryzen™ Embedded 7000 Series ProcessorsNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.