PT-2026-7876 · Amd · Amd Vcn Firmware

CVE-2024-36319 · Published 2026-02-12 · Updated 2026-02-12

Positive Technologies (AI Summary)

CVSS v4.0

6.3

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions AMD VCN Firmware (affected versions not specified)

Description Debug code remaining active within AMD's Video Decoder Engine Firmware (VCN FW) presents a potential risk. An attacker could submit a specially designed command, leading the VCN FW to perform read and write operations on hardware registers. This could compromise the system's confidentiality, integrity, and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1191

Related Identifiers

CVE-2024-36319

Affected Products

Amd Vcn Firmware

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-36319 · Security Note
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-6024.html · Note
• https://t.me/CVEtracker/44549 · Telegram Post