CVE-2024-36342
8.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Summary
Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execution.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| AMD | AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics | Radeon Software for Linux 25.10.x | unaffected |
| AMD | AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics | Radeon Software for Linux 25.10.x | unaffected |
| AMD | AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics | Radeon Software for Linux 25.10.x | unaffected |
| AMD | AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics | Radeon Software for Linux 25.10.x | unaffected |
| AMD | AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics | Radeon Software for Linux 25.10.x | unaffected |
| AMD | AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics | Radeon Software for Linux 25.10.x | unaffected |
| AMD | AMD Ryzen™ 7000 Series Desktop Processors | Radeon Software for Linux 25.10.x | unaffected |
| AMD | AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics | Radeon Software for Linux 25.10.x | unaffected |
| AMD | AMD Ryzen™ AI 300 Series Processors | Radeon Software for Linux 25.10.x | unaffected |
| AMD | AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics | Radeon Software for Linux 25.10.x | unaffected |
| AMD | AMD Ryzen™ 8000 Series Desktop Processors | Radeon Software for Linux 25.10.x | unaffected |
| AMD | AMD Ryzen™ 9000 Series Desktop Processors | Radeon Software for Linux 25.10.x | unaffected |
| AMD | AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics | Radeon Software for Linux 25.10.x | unaffected |
| AMD | AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics | Radeon Software for Linux 25.10.x | unaffected |
| AMD | AMD Ryzen™ 4000 Series Desktop Processors | Radeon Software for Linux 25.10.x | unaffected |
| AMD | AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics | Radeon Software for Linux 25.10.x | unaffected |
| AMD | AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics | Radeon Software for Linux 25.10.x | unaffected |
| AMD | AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics | Radeon Software for Linux 25.10.x | unaffected |
| AMD | AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics | Radeon Software for Linux 25.10.x | unaffected |
| AMD | AMD Ryzen™ Embedded R2000 Series Processors | amd_chipset_software_7.06.02.123.exe , PSP driver version: 5.39.0.0 | unaffected |
| AMD | AMD Ryzen™ Embedded V2000 Series Processors | amd_chipset_software_7.06.02.123.exe , PSP driver version: 5.39.0.0 | unaffected |
| AMD | AMD Ryzen™ Embedded 8000 Series | amd_chipset_software_7.06.02.123.exe , PSP driver version: 5.39.0.0 | unaffected |
| AMD | AMD Ryzen™ Embedded 7000 Series Processors | amd_chipset_software_7.06.02.123.exe , PSP driver version: 5.39.0.0 | unaffected |
| AMD | AMD Radeon™ RX 5000 Series Graphics Products | Radeon Software for Linux 25.10.1 | unaffected |
| AMD | AMD Radeon™ PRO W5000 Series Graphics Products | Radeon Software for Linux 25.10.1 | unaffected |
| AMD | AMD Radeon™ RX 6000 Series Graphics Products | Radeon Software for Linux 25.10.1 | unaffected |
| AMD | AMD Radeon™ PRO W6000 Series Graphics Products | Radeon Software for Linux 25.10.1 | unaffected |
| AMD | AMD Radeon™ RX 7000 Series Graphics Products | Radeon Software for Linux 25.10.1 | unaffected |
| AMD | AMD Radeon™ PRO W7000 Series Graphics Products | Radeon Software for Linux 25.10.1 | unaffected |
| AMD | AMD Radeon™ RX 9000 Series Graphics Products | Radeon Software for Linux 25.10.1 | unaffected |
| AMD | AMD Radeon™ RX Vega Series Graphics Cards | Radeon Software for Linux 25.10.1 | unaffected |
| AMD | AMD Radeon™ PRO VII | Radeon Software for Linux 25.10.1 | unaffected |
| AMD | AMD Instinct™ MI210 | ROCm 6.4 | unaffected |
| AMD | AMD Instinct™ MI250 | ROCm 6.4 | unaffected |
| AMD | AMD Instinct™ MI300A | ROCm 6.4 | unaffected |
| AMD | AMD Instinct™ MI300X | ROCm 6.4 | unaffected |
| AMD | AMD Instinct™ MI308X | ROCm 6.4 | unaffected |
| AMD | AMD Instinct™ MI325X | ROCm 6.4 | unaffected |
| AMD | AMD Radeon™ PRO V520 Graphics Products | Contact your AMD Customer Engineering representative | unaffected |
| AMD | AMD Radeon™ PRO V620 Graphics Products | Contact your AMD Customer Engineering representative | unaffected |
| AMD | AMD Radeon™ PRO V710 Graphics Products | Contact your AMD Customer Engineering representative | unaffected |
Weaknesses
- CWE-1285: CWE-1285 Improper Validation of Specified Index, Position, or Offset in Input
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.