Intel

CVE-2024-36349

Eine vorübergehende Ausführungsschwachstelle in einigen AMD-Prozessoren kann es einem Benutzerprozess ermöglichen, TSC_AUX abzuleiten, au…

lowEPSS 0.2%

Description

A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, potentially resulting in information leakage.

Source: BSI CSAFBSI WID Portalcvelistv5

Metrics

XIEM Effective CVSS
3.8
Source: cna-v3
EPSS percentile
8.2 %
Low — this CVE sits in the lower 10% of all CVEs scored today.
KEV status
—
Show all metrics
Severity
low
Priority score
29.63
Exploit maturity
no public PoC known
CVSS v3
3.8
EPSS score
0.2 %
Low — model estimates < 1% exploitation likelihood.
Published
2025-07-08 16:42 UTC
CWE
CWE-1420

Weakness classes (CWE)

  • CWE-1420Base

    Exposure of Sensitive Information during Transient Execution

    A processor event or prediction may allow incorrect operations (or correct operations with incorrect data) to execute transiently, potentially exposing data over a covert channel.

    cwe.mitre.org →

References & sources

Linked advisories