CVE-2024-36342

Published: Sep 6, 2025Modified: Jun 17, 2026Deferred

8.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.0 / Impact: 6.0

Source: psirt@amd.com (Secondary)

Description

Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execution.

Related CWEs

Improper Validation of Specified Index, Position, or Offset in Input

The product receives input that is expected to specify an index, position, or offset into an indexable resource such as a buffer or file, but it does not validate or incorrectly validates that the specified index/position/offset has the required properties.

References (2)

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html

Source: psirt@amd.com

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html

Source: psirt@amd.com

Timeline

No history available yet.