← Back

CVE-2024-36333

nvd nist
Published: May 15, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.0
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: psirt@amd.com (Secondary)

Description

A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

Affected (3)

Amd
2 products
Radeon Software
Cleanup Utility
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Radeon Software
Before 26.q1
Running on/withPlatform Versions
Amd
Radeon Pro Vii
All versions
Configuration B
1 vulnerable · 15 platform
Vulnerable SoftwareAffected Versions
Radeon Software
Before 25.q3.1
Running on/withPlatform Versions
Amd
Radeon Pro W5500
All versions
Amd
Radeon Pro W5500x
All versions
Amd
Radeon Pro W5700
All versions
Amd
Radeon Pro W5700x
All versions
Amd
Radeon Pro W6300
All versions
Amd
Radeon Pro W6300m
All versions
Amd
Radeon Pro W6400
All versions
Amd
Radeon Pro W6500m
All versions
Amd
Radeon Pro W6600
All versions
Amd
Radeon Pro W6600m
All versions
Amd
Radeon Pro W6600x
All versions
Amd
Radeon Pro W6800
All versions
Amd
Radeon Pro W6800x
All versions
Amd
Radeon Pro W6800x Duo
All versions
Amd
Radeon Pro W6900x
All versions
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Cleanup Utility
Version 25.20.00.00

Related CWEs

CWE-427
Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (1)

Source: psirt@amd.com
Vendor Advisory

Timeline

No history available yet.