CVE-2024-36319

Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potentially impacting confidentiality, integrity and availabilability of the system.

Score

CVSS 4.0 6.3 Medium

Status

Deferred - psirt@amd.com

Published

2026-02-12

Last modified

2026-02-26

Weaknesses

CWE-1191

Affected products

• Amd Instinct Mi300a (Amd)
• Amd Instinct Mi300x (Amd)
• Amd Instinct Mi308x (Amd)
• Amd Instinct Mi325x (Amd)
• Amd Radeon Pro V710 (Amd)
• Amd Radeon Pro W7000 Series Graphics Products (Amd)
• Amd Radeon Rx 7000 Series Graphics Products (Amd)
• Amd Ryzen 7040 Series Mobile Processors With Radeon Graphics Amd Ryzen 8040 Series Mobile Processors With Radeon Graphics (Amd)
• Amd Ryzen 8000 Series Desktop Processors (Amd)
• Amd Ryzen Ai 300 Series Processors (Amd)
• Amd Ryzen Ai Max Series Processors (Amd)
• Amd Ryzen Embedded 7000 Series Processors (Amd)
• Amd Ryzen Embedded 8000 Series Processors (Amd)
• Amd Ryzen Embedded 9000 Series Processors (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6024.html