CVE-2024-36350

MEDIUM5.6

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information

Published Jul 8, 2025

Modified 2 months ago

Details

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information.

References

WEBhttp://www.openwall.com/lists/oss-security/2025/08/28/2 WEBhttp://xenbits.xen.org/xsa/advisory-471.html WEBhttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html WEBhttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html WEBhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-7029.html ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2024-36350

CVSS Analysis

CVSS v3.1

5.6

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

HighAC:H

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

NoneA:N

5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Weakness Type (CWE)

Other

CWE-1421

Ecosystems

Timeline

PublishedJul 8, 2025

ModifiedNov 4, 2025