Vulnerability in AMD Radeon™ Rx 7000 Series Graphics Products

CVE-2024-36334

Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to be run with elevated privileges potentially leading to arbitrary code execution.

Published · last modified .

EPSS exploit prediction

EPSS: 0.001 (0.2th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 0th percentile — 0.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2024-36334: held from 0.001 to 0.001.

EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: 0.000

Affected products

  • AMD Radeon™ Rx 7000 Series Graphics Products — versions amd_rx_7900_xtx_rgb_led_20241008.exe “AMD Radeon RX 7900 XTX RGB Tool” available at https://www.amd.com/en/support/downloads/drivers.html/graphics/radeon-rx/radeon-rx-7000-series/amd-radeon-rx-7900-xtx.html

Weakness classification (CWE)

References