CVE-2024-36323

Published: May 15, 2026

Modified: May 16, 2026

PUBLISHED

Description

Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data.

Vendor	Product	Versions
AMD	AMD Radeon™ RX 7000 Series Graphics Products	unaffected `Radeon Software for Linux 24.20.3` unaffected `AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01)`
AMD	AMD Radeon™ PRO W7000 Series Graphics Products	unaffected `Radeon Software for Linux 24.20.3` unaffected `AMD Software: PRO Edition 25.Q3.1 (25.10.32)`
AMD	AMD Instinct™ MI308X	unaffected `ROC 6.3`
AMD	AMD Instinct™ MI325X	unaffected `ROC 6.3`
AMD	AMD Instinct™ MI300X	unaffected `ROCm 6.3`
AMD	AMD Instinct™ MI300A	unaffected `ROCm 6.3`

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-36323

Description

Affected Products

References