Vulnerability in AMD Virtualization Technology Impacting JPEG Cores

CVE-2024-36323

What is CVE-2024-36323?

The vulnerability arises from the improper isolation of the VCN-JPEG HW register space within AMD's virtualization technology. This flaw can allow a malicious Guest Virtual Machine (VM) or process to gain unauthorized access to the register space of JPEG cores assigned to a victim VM or process. Consequently, this may enable attackers to perform arbitrary read and write operations on the data of the affected VM or process, posing significant risks to data integrity and confidentiality.

References