CVE-2024-36316: AMD Ryzen™ 6000 Series Processors with Radeon™

Описание

Оригинално описание

The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially resulting in a denial of service

Засегнати продукти

• AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics; AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 7000 Series Desktop Processors; AMD Ryzen™ 8000 Series Desktop Processors; AMD Ryzen™ 9000 Series Desktop Processors: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 9000HX Series Mobile Processors (formerly codenamed "Fire Range"): AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ Al Max+: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ AI 300 Series Processors (formerly codenamed "Strix Point"): AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ Embedded 8000 Series Processors: AMD Software: Adrenalin Edition 25.6.1 / AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ Embedded 7000 Series Processors: AMD Software: Adrenalin Edition 25.6.1 / AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Radeon™ RX 6000 Series Graphics Products: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Radeon™ PRO W6000 Series Graphics Products: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Radeon™ RX 7000 Series Graphics Products: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Radeon™ PRO W7000 Series Graphics Products: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Radeon™ PRO V520: Contact your AMD Customer Engineering representative
• AMD AMD Radeon™ PRO V620: Contact your AMD Customer Engineering representative
• AMD AMD Radeon™ PRO V710: Contact your AMD Customer Engineering representative

Вид слабост

• CWE-190 Целочислено препълване отгоре

История

Други уязвимости в AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics; AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics

• 6.9CVE-2026-43603
• 7.4CVE-2023-20577
• 7.7CVE-2023-20576
• 5.6CVE-2023-20572
• 7.1CVE-2021-46747

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2024-36316
• https://nvd.nist.gov/vuln/detail/CVE-2024-36316
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6024.html