---
id: "CVE-2024-36344"
page: "https://infrastack.ai/live/CVE-2024-36344"
kind: "vulnerability"
aliases: ["CVE-2024-36344"]
title: "AMD Secure Processor TEE: parameter flaw allows out-of-bounds write locally"
severity: "medium"
cvss: 6.9
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["amd", "firmware", "infrastructure", "secure-processor", "tee"]
not_affected_if: ["no-local-access"]
published_at: "2026-11-12T20:18:12+00:00"
first_seen_at: "2026-11-12T20:40:22+00:00"
updated_at: "2026-11-12T20:42:18+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36344", "first_seen_at": "2026-11-12T20:40:22+00:00"}]
exploit_sources: []
---

# AMD Secure Processor TEE: parameter flaw allows out-of-bounds write locally

Link for people: https://infrastack.ai/live/CVE-2024-36344 (this .md is for agents)

AMD Secure Processor's TEE DrvSys does not sanitize some parameters, so code with local access to the TEE interface or a Trusted Application can trigger an out-of-bounds write. The result can be loss of platform integrity or a denial of service.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-12T20:40:22+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2024-36344

## From the sources

Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE DrvSys could allow an attacker with local access to the Trusted Execution Environment (TEE) interface or Trusted Application (TA) to cause an out-of-bounds write, potentially resulting in a loss of platform integrity or denial of service.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_