CVE-2024-36354 – Intel DIMM SMM Isolation Bypass Vulnerability

CVE ID : CVE-2024-36354

Published : Sept. 6, 2025, 6:15 p.m. | 1 hour, 5 minutes ago

Description : Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to bypass SMM isolation potentially resulting in arbitrary code execution at the SMM level.

Severity: 7.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…