CVE-2024-36344: Integer Underflow
Published Nov 12, 2026
·Updated
Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE DrvSys could allow an attacker with local access to the Trusted Execution Environment (TEE) interface or Trusted Application (TA) to cause an out-of-bounds write, potentially resulting in a loss of platform integrity or denial of service.
Event History
Nov 12, 2026
CVE Published
via MITRE·07:19 PM
Data Sourced
via MITRE·07:19 PM
DescriptionWeakness
Data Sourced
via NVD·08:18 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who could realistically exploit this issue?
An attacker needs local access to either the Trusted Execution Environment interface or a Trusted Application. The available information does not indicate that remote access alone is sufficient.
2
What is the potential impact of successful exploitation?
Successful exploitation can cause an out-of-bounds write in the AMD Secure Processor TEE DrvSys. This may result in loss of platform integrity or denial of service.