CVE-2024-36333: AMD Radeon™ RX 5000 Series Graphics Products, верига

Описание

Оригинално описание

A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

Засегнати продукти

• AMD AMD Radeon™ RX 5000 Series Graphics Products: AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01 RDNA3+, 25.10.33.02 RDNA1/RDNA2)
• AMD AMD Radeon™ PRO W5000 Series Graphics Products: AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA)
• AMD AMD Radeon™ RX 6000 Series Graphics Products: AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01 RDNA3+, 25.10.33.02 RDNA1/RDNA2)
• AMD AMD Radeon™ RX 7000 Series Graphics Products: AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01 RDNA3+, 25.10.33.02 RDNA1/RDNA2)
• AMD AMD Cleanup Utility: https://www.amd.com/en/resources/support-articles/faqs/GPU-601.html
• AMD AMD Radeon™ PRO W6000 Series Graphics Products: AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA)
• AMD AMD Radeon™ PRO W7000 Series Graphics Products: AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA)
• AMD AMD Radeon™ RX Vega Series Graphics Cards: AMD Software: Adrenalin Edition 26.1.1 (23.19.24)
• AMD AMD Radeon™ VII: AMD Software: Adrenalin Edition 26.1.1 (23.19.24)
• AMD AMD Radeon™ PRO WX 8000/9000 Series Graphics Cards: AMD Software: PRO Edition 26.Q1 (23.19.24)
• AMD AMD Radeon™ PRO VII: AMD Software: PRO Edition 26.Q1 (23.19.24)

Вид слабост

• CWE-427 Неконтролиран елемент от пътя за търсене

История

Други уязвимости в AMD AMD Radeon™ RX 5000 Series Graphics Products

• 6.9CVE-2026-43603
• 7.1CVE-2021-46747
• 8.8CVE-2024-36323
• 7.0CVE-2024-36334
• 4.8CVE-2025-0044

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2024-36333
• https://nvd.nist.gov/vuln/detail/CVE-2024-36333
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html