CVE-2024-36334 — AMD / AMD Radeon™ RX 7000 Series Graphics Products

CVE-2024-36334

AMD / AMD Radeon™ RX 7000 Series Graphics Products PUBLISHED

Description (CNA)

Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to be run with elevated privileges potentially leading to arbitrary code execution.

Affected (CNA)

Vendor / product	Versions
AMD / AMD Radeon™ RX 7000 Series Graphics Products	unaffected amd_rx_7900_xtx_rgb_led_20241008.exe “AMD Radeon RX 7900 XTX RGB Tool” available at https://www.amd.com/en/support/downloads/drivers.html/graphics/radeon-rx/radeon-rx-7000-series/amd-radeon-rx-7900-xtx.html

CWE

CWE-347

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.