Skip to main content

AMD's Video Decoder Engine Firmware CVE-2024-36319

On-Chip Debug and Test Interface With Improper Access Control (CWE-1191)
2026-02-12 psirt@amd.com
Information Disclosure

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 22:02 vuln.today
CVE Published
Feb 12, 2026 - 18:16 nvd
N/A

DescriptionCVE.org

Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potentially impacting confidentiality, integrity and availabilability of the system.

Analysis

Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potentially impacting confidentiality, integrity and availabilability of the system.

Technical ContextAI

Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potentially impacting confidentiality, integrity and availabilability of the system.

Affected ProductsAI

Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could

RemediationAI

Monitor vendor advisories for a patch.

Same weakness CWE-1191 – On-Chip Debug and Test Interface With Improper Access Control

View all
CVE-2022-43096 MEDIUM POC
6.8
CVE-2024-48970 CRITICAL
9.3
CVE-2024-41692 HIGH
8.6
CVE-2025-26409 MEDIUM
6.8
CVE-2024-4231 MEDIUM
6.8
CVE-2025-47822 MEDIUM
6.4
CVE-2025-47819 MEDIUM
6.4
CVE-2025-48468 MEDIUM
6.4

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2024-36319 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy