{"affected":[{"defaultStatus":"affected","product":"AMD EPYC™ 9005 Series Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"TurinPI_1.0.0.B"}]},{"defaultStatus":"affected","product":"AMD EPYC™ 8005 Series Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"TurinPI_1.0.0.B"}]},{"defaultStatus":"affected","product":"AMD EPYC™ 4005 Series Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"ComboAM5PI 1.3.0.1d"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 9000HX Series Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"FireRangeFL1 PI-1.0.0.0i"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ AI 300 Series Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"StrixKrackanPI-FP8_1.1.0.0h"},{"status":"unaffected","version":"StrixKrackanPI-FP8_1.1.0.2g"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 9000 Series Desktop Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"ComboAM5PI 1.2.0.3l"},{"status":"unaffected","version":"ComboAM5PI 1.3.0.1d"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ AI Max 400 Series Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"GorgonHaloPI-FP11_1.0.0.0a"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ AI Max 300 Series Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"StrixHalo PI-FP11_1.0.0.2d"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ AI400 Series Desktop Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"ComboAM5PI 1.3.0.1d"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ AI Z2 Extreme","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"GorgonPI-FP8_1.0.0.2e"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"ShimadaPeakPI-SP6 1.0.0.1h"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ AI 400 Series Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"GorgonPI-FP8_1.0.0.2e"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 9005 Series Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedTurinPI_SP5_1005"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ Embedded 9000 Series Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedAM5PI_1.0.0.9"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ Embedded P100 Series Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedP100 PI 1000"}]},{"defaultStatus":"affected","product":"AMD EPYC™  Embedded 2005 Series Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedFireRangeFL1_1.0.0.5"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 4005 Series Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedAM5PI_1.0.0.9"}]}],"cveId":"CVE-2024-36357","cwes":["CWE-1421"],"description":"A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.","epss":{"date":"2026-11-12","percentile":0.30879,"score":0.00366},"exploits":[],"kev":null,"metrics":[{"score":5.6,"severity":"medium","source":"CNA: AMD","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1794511905952,"publishedAt":1751994108957,"references":[{"source":"CNA: AMD","tags":[],"url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-7073.html"},{"source":"ADP: CVE","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"},{"source":"ADP: CVE","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html"},{"source":"ADP: CVE","tags":[],"url":"http://xenbits.xen.org/xsa/advisory-471.html"},{"source":"ADP: CVE","tags":[],"url":"http://www.openwall.com/lists/oss-security/2025/08/28/2"}],"remediation":[],"revision":"978f27df82ae7c3b105d8623486ae2ecf952df1a3454214629325fc5af71509a","sources":[{"modifiedAt":1794511905952,"name":"CNA: AMD","retrievedAt":1794514115787,"url":"https://www.cve.org/CVERecord?id=CVE-2024-36357"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794514146595,"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-36357"}],"ssvc":{"assessedAt":1752068219777,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2024-36357","updatedAt":1794514146595}