{"id":"CVE-2024-36344","kind":"vulnerability","aliases":["CVE-2024-36344"],"related":[],"title":"AMD Secure Processor TEE: parameter flaw allows out-of-bounds write locally","description":"Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE DrvSys could allow an attacker with local access to the Trusted Execution Environment (TEE) interface or Trusted Application (TA) to cause an out-of-bounds write, potentially resulting in a loss of platform integrity or denial of service.","summary":"AMD Secure Processor's TEE DrvSys does not sanitize some parameters, so code with local access to the TEE interface or a Trusted Application can trigger an out-of-bounds write. The result can be loss of platform integrity or a denial of service.","severity":"medium","cvss":6.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd","firmware","infrastructure","secure-processor","tee"],"not_affected_if":["no-local-access"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-12T20:18:12+00:00","first_seen_at":"2026-11-12T20:40:22+00:00","triaged_at":"2026-11-12T20:42:18+00:00","updated_at":"2026-11-12T20:42:18+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-12T20:42:18Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"AMD Secure Processor TEE: parameter flaw allows out-of-bounds write locally","impact":"medium","summary":"AMD Secure Processor's TEE DrvSys does not sanitize some parameters, so code with local access to the TEE interface or a Trusted Application can trigger an out-of-bounds write. The result can be loss of platform integrity or a denial of service.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["amd","secure-processor","tee","firmware"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Platform integrity lost or the machine crashes under denial of service","analyst_note":"Find AMD's security bulletin for CVE-2024-36344 to get affected firmware and fixed versions; the NVD entry alone does not give them.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-access"],"who_is_affected":"Affects AMD systems with the Secure Processor TEE. The attacker must already have local access to the TEE interface or a Trusted Application, so exposure from the network is not described. The sources do not name affected firmware or product versions.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000692,"input_tokens":4571,"output_tokens":469,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2024':15A,18A '-36344':16A,19A 'access':42B,88C 'allow':7A,83C 'amd':1A,20B,27B,76C 'applic':50B,98C 'asp':79C 'attack':85C 'bound':11A,57B,106C 'caus':101C 'code':39B 'could':82C 'cve':14A,17A 'denial':69B,117C 'drvsys':32B,81C 'environ':93C 'execut':92C 'firmwar':21B 'flaw':6A 'infrastructur':22B 'insuffici':72C 'integr':66B,115C 'interfac':46B,95C 'local':13A,41B,87C 'loss':63B,112C 'out-of-bound':8A,54B,103C 'paramet':5A,37B,73C 'platform':65B,114C 'potenti':108C 'processor':3A,25B,29B,78C 'result':60B,109C 'sanit':35B,74C 'secur':2A,24B,28B,77C 'secure-processor':23B 'servic':71B,119C 'ta':99C 'tee':4A,26B,31B,45B,80C,94C 'trigger':52B 'trust':49B,91C,97C 'write':12A,58B,107C","nicknames":[],"mitigations":[],"who_affected":"Affects AMD systems with the Secure Processor TEE. The attacker must already have local access to the TEE interface or a Trusted Application, so exposure from the network is not described. The sources do not name affected firmware or product versions.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["amd","firmware","infrastructure","medium","secureprocessor","tee"],"campaign_type":null,"search_a":"'-2024':15A,18A '-36344':16A,19A 'allow':7A 'amd':1A 'bound':11A 'cve':14A,17A 'flaw':6A 'local':13A 'out-of-bound':8A 'paramet':5A 'processor':3A 'secur':2A 'tee':4A 'write':12A","search_b":"'access':42B 'amd':20B,27B 'applic':50B 'bound':57B 'code':39B 'denial':69B 'drvsys':32B 'firmwar':21B 'infrastructur':22B 'integr':66B 'interfac':46B 'local':41B 'loss':63B 'out-of-bound':54B 'paramet':37B 'platform':65B 'processor':25B,29B 'result':60B 'sanit':35B 'secur':24B,28B 'secure-processor':23B 'servic':71B 'tee':26B,31B,45B 'trigger':52B 'trust':49B 'write':58B","search_c":"'access':88C 'allow':83C 'amd':76C 'applic':98C 'asp':79C 'attack':85C 'bound':106C 'caus':101C 'could':82C 'denial':117C 'drvsys':81C 'environ':93C 'execut':92C 'insuffici':72C 'integr':115C 'interfac':95C 'local':87C 'loss':112C 'out-of-bound':103C 'paramet':73C 'platform':114C 'potenti':108C 'processor':78C 'result':109C 'sanit':74C 'secur':77C 'servic':119C 'ta':99C 'tee':80C,94C 'trust':91C,97C 'write':107C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-12T20:18:12+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@amd.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2024-36344","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-36344","severity":null,"published_at":"2026-11-12T20:18:12+00:00","modified_at":"2026-11-12T20:18:12+00:00","first_seen_at":"2026-11-12T20:40:22+00:00","fetched_at":"2026-11-12T20:40:22+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}