CVE-2024-36323
Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36323?
CVE-2024-36323 is considered a high severity vulnerability due to the potential for arbitrary read/write access to a victim VM's data.
How do I fix CVE-2024-36323?
Fixing CVE-2024-36323 involves applying the relevant security updates provided by AMD for the VCN-JPEG component.
What impact does CVE-2024-36323 have on affected systems?
CVE-2024-36323 could allow unauthorized access to sensitive data and processes in a guest virtual machine.
Who is affected by CVE-2024-36323?
CVE-2024-36323 affects systems using the AMD VCN-JPEG hardware where guest VMs have not been properly isolated.
What is the attack vector for CVE-2024-36323?
The attack vector for CVE-2024-36323 involves a malicious guest VM or process exploiting improper isolation of hardware register space.