Insufficient Memory Clearance in AMD GPUs Exposes Confidential Data
CVE-2024-36353

6.5MEDIUM

Key Information:

Vendor

Amd
Status
Amd Ryzen™ 4000 Series Mobile Processors With Radeon™ Graphics
Amd Ryzen™ 6000 Series Processors With Radeon™ Graphics
Amd Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics
Amd Ryzen™ 7040 Series Mobile Processors With Radeon™ Graphics
Vendor
CVE Published:
2 March 2025

What is CVE-2024-36353?

A vulnerability exists in certain AMD GPUs due to insufficient clearing of global memory. This oversight could permit malicious processes operating on the same GPU to access residual memory values, therefore compromising data confidentiality. Users of affected AMD GPU models should review security advisories and apply best practices to mitigate risks.

Affected Version(s)

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics Radeon Software For Linux 25.10.1

AMD Radeon™ PRO V520 Contact your AMD Customer Engineering representative

AMD Radeon™ PRO V620 Contact your AMD Customer Engineering representative

References

https://www.amd.com/en/resources/product-security/bulleti...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.