Vulnerability Intelligence Report
CVE-2024-36319
Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potentially impacting confidentiality, integrity and availabilability of the system.
No Active Exploit Signals
CVSS Base Score
6.3
MEDIUM
EPSS Probability:0.13%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-1191 ↗CWE-1191 On-Chip Debug and Test Interface With Improper Access Control
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| AMD | AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics; AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics | AMD Software: Adrenalin Edition 25.5.1, AMD Software: PRO Edition 25.Q2 (unaffected) |
| AMD | AMD Ryzen™ AI MAX Series Processors | AMD Software: Adrenalin Edition 25.5.1, AMD Software: PRO Edition 25.Q2 (unaffected) |
| AMD | AMD Ryzen™ AI 300 Series Processors | AMD Software: Adrenalin Edition 25.5.1, AMD Software: PRO Edition 25.Q2 (unaffected) |
| AMD | AMD Ryzen™ 8000 Series Desktop Processors | AMD Software: Adrenalin Edition 25.5.1, AMD Software: PRO Edition 25.Q2 (unaffected) |
| AMD | AMD Ryzen™ Embedded 8000 Series Processors | Q2 - 2025 AMD Embedded Ryzen[7000 8000 9000] Windows® Catalyst™ driver [25.6.1] (68926) (unaffected) |
| AMD | AMD Ryzen™ Embedded 7000 Series Processors | Q2 - 2025 AMD Embedded Ryzen[7000 8000 9000] Windows® Catalyst™ driver [25.6.1] (68926) (unaffected) |
| AMD | AMD Ryzen™ Embedded 9000 Series Processors | Q2 - 2025 AMD Embedded Ryzen[7000 8000 9000] Windows® Catalyst™ driver [25.6.1] (68926) (unaffected) |
| AMD | AMD Radeon™ RX 7000 Series Graphics Products | 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2(25.10.10), Radeon Software For Linux 25.10.1 (unaffected) |
| AMD | AMD Radeon™ PRO W7000 Series Graphics Products | 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2(25.10.10), Radeon Software For Linux 25.10.1 (unaffected) |
| AMD | AMD Instinct™ MI300X | ROCm 6.2.4 (unaffected) |
| AMD | AMD Instinct™ MI300A | ROCm 6.2.4 (unaffected) |
| AMD | AMD Instinct™ MI308X | ROCm 6.2.4 (unaffected) |
| AMD | AMD Instinct™ MI325X | ROCm 6.2.4 (unaffected) |
| AMD | AMD Radeon™ PRO V710 | Contact your AMD Customer Engineering representative (unaffected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.129%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Advanced Micro Devices Inc. · Vendor · USA |
| Reserved | 2024-05-23T19:44:40 |
| Published | 2026-02-12T17:41:06 |
| Patch Date | 2026-02-12 |
| Last Updated | 2026-02-26T14:44:20 |
Community Chatter & Buzz