CVE-2024-36357

{"id": "CVE-2024-36357", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@amd.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.6, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.0, "exploitabilityScore": 1.1}]}, "published": "2025-07-08T17:15:31.723", "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7029.html", "source": "psirt@amd.com"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries."}, {"lang": "es", "value": "Una vulnerabilidad de ejecuci\u00f3n transitoria en algunos AMD processors puede permitir que un atacante infiera datos en la memoria cach\u00e9 L1D, lo que podr\u00eda resultar en la fuga de informaci\u00f3n confidencial a trav\u00e9s de los l\u00edmites privilegiados."}], "lastModified": "2025-07-10T13:19:18.800", "sourceIdentifier": "psirt@amd.com"}