Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

AMD AMD Ryzenâ„¢ 6000 Series Processors with Radeonâ„¢ Graphics; AMD Ryzenâ„¢ 7035 Series Processors with Radeonâ„¢ Graphics

CVE-2024-36316
MEDIUM 5.5

At a glance

Source
NVD
EPSS
EPSS 0.17 % · percentile 7 ()
State
PUBLISHED
Published
Updated
Assigner
AMD
NVD status
Deferred

Search on…

Description

The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially resulting in a denial of service

Weaknesses (CWE)

  • CWE-190 — Integer Overflow or Wraparound

References

Scores

VersionScoreVectorScored by
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HAMD
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · psirt@amd.com (Secondary)

European references

Affected products

ProductVersions
AMD · AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics; AMD Ryzen™ 7035 Series Processors with Radeon™ Graphicsunaffected AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD · AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphicsunaffected AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD · AMD Ryzen™ 7020 Series Processors with Radeon™ Graphicsunaffected AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD · AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphicsunaffected AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD · AMD Ryzen™ 7000 Series Desktop Processors; AMD Ryzen™ 8000 Series Desktop Processors; AMD Ryzen™ 9000 Series Desktop Processorsunaffected AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD · AMD Ryzen™ 9000HX Series Mobile Processors (formerly codenamed "Fire Range")unaffected AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD · AMD Ryzen™ Al Max+unaffected AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD · AMD Ryzen™ AI 300 Series Processors (formerly codenamed "Strix Point")unaffected AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD · AMD Ryzen™ Embedded 8000 Series Processorsunaffected AMD Software: Adrenalin Edition 25.6.1 / AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD · AMD Ryzen™ Embedded 7000 Series Processorsunaffected AMD Software: Adrenalin Edition 25.6.1 / AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD · AMD Radeon™ RX 6000 Series Graphics Productsunaffected AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD · AMD Radeon™ PRO W6000 Series Graphics Productsunaffected AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD · AMD Radeon™ RX 7000 Series Graphics Productsunaffected AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD · AMD Radeon™ PRO W7000 Series Graphics Productsunaffected AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD · AMD Radeon™ PRO V520unaffected Contact your AMD Customer Engineering representative
AMD · AMD Radeon™ PRO V620unaffected Contact your AMD Customer Engineering representative
AMD · AMD Radeon™ PRO V710unaffected Contact your AMD Customer Engineering representative

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD