CVE-2024-36334

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to be run with elevated privileges potentially leading to arbitrary code execution.

Metrics

CVSS 4.0 7.0/10CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-347

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
May 15, 2026
Last modified
Jun 17, 2026
NVD status
Awaiting Analysis

Related CVEs from 2024

CVE-2024-363367.9Integer overflow within the AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to a loss of confidentiaCVE-2024-363377.9Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of confidentiality, CVE-2024-363397.3A DLL hijacking vulnerability in the AMD Optimizing CPU Libraries could allow an attacker to achieve privilege escalation, potentially resulCVE-2024-36344.8The month name translation benaceur WordPress plugin before 2.3.8 does not sanitise and escape some of its settings, which could allow high CVE-2024-363406.6A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting CVE-2024-363428.8Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execuCVE-2024-363434.6Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bCVE-2024-363454.6Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an outCVE-2024-363466.0Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to send arbitrary input daCVE-2024-363476.4Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicCVE-2024-363483.8A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMICVE-2024-363493.8A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, pote