CVE-2024-36320: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™

Описание

Оригинално описание

Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, integrity and availability

Засегнати продукти

• AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 7000 Series Desktop Processors: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ AI 300 Series Processors: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 8000 Series Desktop Processors: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 9000 Series Desktop Processors: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 4000 Series Desktop Processors: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ AI MAX+: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Ryzen™ 9000HX Series Mobile Processors (formerly codenamed "Fire Range"): AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Radeon™ RX 5000 Series Graphics Products: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Radeon™ PRO W5000 Series Graphics Products: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Radeon™ RX 6000 Series Graphics Products: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Radeon™ PRO W6000 Series Graphics Products: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Radeon™ RX 7000 Series Graphics Products: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Radeon™ PRO W7000 Series Graphics Products: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Radeon™ PRO WX 8000/9000 Series Graphics Cards: AMD Software: Adrenalin Edition 25.5.1 (23.19.23.01 pre-RDNA), AMD Software: PRO Edition 25.Q2 (23.19.23.01 pre-RDNA)
• AMD AMD Radeon™ PRO VII: AMD Software: Adrenalin Edition 25.5.1 (23.19.23.01 pre-RDNA), AMD Software: PRO Edition 25.Q2 (23.19.23.01 pre-RDNA)
• AMD AMD Radeon™ RX Vega Series Graphics Cards: AMD Software: Adrenalin Edition 25.5.1 (23.19.23.01 pre-RDNA), AMD Software: PRO Edition 25.Q2 (23.19.23.01 pre-RDNA)
• AMD AMD Radeon™ RX 9000 Series Graphics Products: AMD Software: Adrenalin Edition 25.5.1 (23.19.23.01 pre-RDNA), AMD Software: PRO Edition 25.Q2 (23.19.23.01 pre-RDNA)
• AMD AMD Radeon™ VII: AMD Software: Adrenalin Edition 25.5.1 (23.19.23.01 pre-RDNA), AMD Software: PRO Edition 25.Q2 (23.19.23.01 pre-RDNA)
• AMD AMD Ryzen™ Embedded R1000 Series Processors: 25Q3 AMD Emb [R1000 V1000] Win® Catalyst™ WHQL certified driver (71251)
• AMD AMD Ryzen™ Embedded R2000 Series Processors: Q2- 2025 AMD Embedded R2000, V2000 Windows® Catalyst™ WHQL certified driver (68914)
• AMD AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge"): 25Q3 AMD Emb [R1000 V1000] Win® Catalyst™ WHQL certified driver (71251)
• AMD AMD Ryzen™ Embedded 7000 Series Processors: Q2 - 2025 AMD Embedded Ryzen[7000 8000 9000] Windows® Catalyst™ driver [25.6.1] (68926)
• AMD AMD Ryzen™ Embedded 8000 Series Processors: Q2 - 2025 AMD Embedded Ryzen[7000 8000 9000] Windows® Catalyst™ driver [25.6.1] (68926)
• AMD AMD Ryzen™ Embedded V2000 Series Processors: Q2- 2025 AMD Embedded R2000, V2000 Windows® Catalyst™ WHQL certified driver (68914)
• AMD AMD Ryzen™ Embedded 9000 Series Processors: Q2 - 2025 AMD Embedded Ryzen[7000 8000 9000] Windows® Catalyst™ driver [25.6.1] (68926)

Вид слабост

• CWE-190 Целочислено препълване отгоре

История

Други уязвимости в AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

• 6.9CVE-2026-43603
• 7.4CVE-2023-20577
• 7.7CVE-2023-20576
• 5.6CVE-2023-20572
• 7.1CVE-2021-46747

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2024-36320
• https://nvd.nist.gov/vuln/detail/CVE-2024-36320
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6024.html