← CVE Intelligence

CVE-2024-36323

AMD / AMD Radeon™ RX 7000 Series Graphics Products PUBLISHED

Description (CNA)

Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data.

Affected (CNA)

Vendor / productVersions
AMD / AMD Radeon™ RX 7000 Series Graphics Productsunaffected Radeon Software for Linux 24.20.3; unaffected AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01)
AMD / AMD Radeon™ PRO W7000 Series Graphics Productsunaffected Radeon Software for Linux 24.20.3; unaffected AMD Software: PRO Edition 25.Q3.1 (25.10.32)
AMD / AMD Instinct™ MI308Xunaffected ROC 6.3
AMD / AMD Instinct™ MI325Xunaffected ROC 6.3
AMD / AMD Instinct™ MI300Xunaffected ROCm 6.3
AMD / AMD Instinct™ MI300Aunaffected ROCm 6.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.