CVE-2024-36334: AMD Radeon™ RX 7000 Series Graphics Products, слаба

Описание

Оригинално описание

Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to be run with elevated privileges potentially leading to arbitrary code execution.

Засегнати продукти

• AMD AMD Radeon™ RX 7000 Series Graphics Products: amd_rx_7900_xtx_rgb_led_20241008.exe “AMD Radeon RX 7900 XTX RGB Tool” available at https://www.amd.com/en/support/downloads/drivers.html/graphics/radeon-rx/radeon-rx-7000-series/amd-radeon-rx-7900-xtx.html

Вид слабост

• CWE-347 Неправилна проверка на криптографски подпис

История

Други уязвимости в AMD AMD Radeon™ RX 7000 Series Graphics Products

• 6.9CVE-2026-43603
• 7.1CVE-2021-46747
• 8.8CVE-2024-36323
• 7.0CVE-2024-36333
• 4.8CVE-2025-0044

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2024-36334
• https://nvd.nist.gov/vuln/detail/CVE-2024-36334
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html