CARMAX INC

Evaluation of Disclosure Controls and Procedures

We maintain disclosure controls and procedures (as defined in Rule 13a-15(e) under the Securities Exchange Act of 1934, as amended (“Exchange Act”)) that are designed to ensure that information required to be disclosed in our reports filed under the

Exchange Act is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms. Our disclosure controls and procedures are also designed to ensure that this information is accumulated and communicated to management, including the chief executive officer (“CEO”) and the chief financial officer (“CFO”), as appropriate to allow timely decisions regarding required disclosure.

As of February 28, 2025, we evaluated the effectiveness of the design and operation of our disclosure controls. This evaluation was performed under the supervision and with the participation of management, including the CEO and CFO. Based upon that evaluation, the CEO and CFO concluded that our disclosure controls were effective as of the end of the period.

Changes in Internal Control over Financial Reporting

There was no change in our internal control over financial reporting that occurred during the quarter ended February 28, 2025 that has materially affected, or is reasonably likely to materially affect, our internal control over financial reporting.

Management’s Report on Internal Control over Financial Reporting

“Management’s Annual Report on Internal Control over Financial Reporting” is included in Item 8. Consolidated Financial Statements and Supplementary Data, of this Form 10-K and is incorporated herein by reference.