Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-36323

Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG co

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Radeon™ RX 7000 Series Graphics Products

Default version status: affected

  • Radeon Software for Linux 24.20.3unaffected
  • AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01)unaffected

AMD AMD Radeon™ PRO W7000 Series Graphics Products

Default version status: affected

  • Radeon Software for Linux 24.20.3unaffected
  • AMD Software: PRO Edition 25.Q3.1 (25.10.32)unaffected

AMD AMD Instinct™ MI308X

Default version status: affected

  • ROC 6.3unaffected

AMD AMD Instinct™ MI325X

Default version status: affected

  • ROC 6.3unaffected

AMD AMD Instinct™ MI300X

Default version status: affected

  • ROCm 6.3unaffected

AMD AMD Instinct™ MI300A

Default version status: affected

  • ROCm 6.3unaffected

References