CVE-2024-36336: Integer Overflow
Published Apr 2, 2025
·Updated
Integer overflow within the AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to a loss of confidentiality, integrity, or availability.
Event History
Apr 2, 2025
CVE Published
via MITRE·04:20 PM
Data Sourced
via MITRE·04:20 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Apr 8, 2025
News Published
via The Register·11:43 PM
News Published
via The Register·11:47 PM
Apr 12, 2025
Known Exploited
11:50 PM
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2024-36336?
CVE-2024-36336 has a high severity rating of 7.9.
2
How does CVE-2024-36336 affect systems?
CVE-2024-36336 can allow a local attacker to perform out-of-bounds writes, impacting confidentiality, integrity, and availability.
3
What is the exploitation status of CVE-2024-36336?
CVE-2024-36336 is exploited and listed in the Known Exploited Vulnerabilities (KEV) database.
4
How can I mitigate CVE-2024-36336?
To mitigate CVE-2024-36336, updating the AMD NPU Driver to the latest version is recommended.
5
What type of vulnerabilities are associated with CVE-2024-36336?
CVE-2024-36336 is associated with integer overflow and use after free vulnerabilities.