CVE-2024-36319
No fix known EPSS <1%CVSS 6.3
Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potentially impacting confidentiality, integrity and availabilability of the system.
Products: AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics; AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ AI MAX Series Processors, AMD Ryzen™ AI 300 Series Processors, AMD Ryzen™ 8000 Series Desktop Processors, AMD Ryzen™ Embedded 8000 Series Processors, AMD Ryzen™ Embedded 7000 Series Processors, AMD Ryzen™ Embedded 9000 Series Processors, AMD Radeon™ RX 7000 Series Graphics Products, AMD Radeon™ PRO W7000 Series Graphics Products, AMD Instinct™ MI300X, AMD Instinct™ MI300A, AMD Instinct™ MI308X, AMD Instinct™ MI325X, AMD Radeon™ PRO V710