Uncontrolled search path in AMD Radeon™ RX 5000 Series Graphics Products
Priority LOW 32CWE-427Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- Passive
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-427.
Summary
A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00119 1st percentileScored 2026-11-07
Fix Fixed AMD Radeon™ RX 5000 Series Graphics Products (AMD): AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01 RDNA3+, 25.10.33.02 RDNA1/RDNA2)AMD Radeon™ PRO W5000 Series Graphics Products (AMD): AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA)+9 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| AMD | AMD Radeon™ RX 5000 Series Graphics Products | — | AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01 RDNA3+, 25.10.33.02 RDNA1/RDNA2) | Patch available | CNA |
| AMD | AMD Radeon™ PRO W5000 Series Graphics Products | — | AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA) | Patch available | CNA |
| AMD | AMD Radeon™ RX 6000 Series Graphics Products | — | AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01 RDNA3+, 25.10.33.02 RDNA1/RDNA2) | Patch available | CNA |
| AMD | AMD Radeon™ RX 7000 Series Graphics Products | — | AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01 RDNA3+, 25.10.33.02 RDNA1/RDNA2) | Patch available | CNA |
| AMD | AMD Cleanup Utility | — | https://www.amd.com/en/resources/support-articles/faqs/GPU-601.html | Patch available | CNA |
| AMD | AMD Radeon™ PRO W6000 Series Graphics Products | — | AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA) | Patch available | CNA |
| AMD | AMD Radeon™ PRO W7000 Series Graphics Products | — | AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA) | Patch available | CNA |
| AMD | AMD Radeon™ RX Vega Series Graphics Cards | — | AMD Software: Adrenalin Edition 26.1.1 (23.19.24) | Patch available | CNA |
| AMD | AMD Radeon™ VII | — | AMD Software: Adrenalin Edition 26.1.1 (23.19.24) | Patch available | CNA |
| AMD | AMD Radeon™ PRO WX 8000/9000 Series Graphics Cards | — | AMD Software: PRO Edition 26.Q1 (23.19.24) | Patch available | CNA |
| AMD | AMD Radeon™ PRO VII | — | AMD Software: PRO Edition 26.Q1 (23.19.24) | Patch available | CNA |
- AMD Radeon™ RX 5000 Series Graphics Products VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01 RDNA3+, 25.10.33.02 RDNA1/RDNA2) Patch available CNA
- AMD Radeon™ PRO W5000 Series Graphics Products VendorAMD Affected — Fixed in AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA) Patch available CNA
- AMD Radeon™ RX 6000 Series Graphics Products VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01 RDNA3+, 25.10.33.02 RDNA1/RDNA2) Patch available CNA
- AMD Radeon™ RX 7000 Series Graphics Products VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01 RDNA3+, 25.10.33.02 RDNA1/RDNA2) Patch available CNA
- AMD Cleanup Utility VendorAMD Affected — Fixed in https://www.amd.com/en/resources/support-articles/faqs/GPU-601.html Patch available CNA
- AMD Radeon™ PRO W6000 Series Graphics Products VendorAMD Affected — Fixed in AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA) Patch available CNA
- AMD Radeon™ PRO W7000 Series Graphics Products VendorAMD Affected — Fixed in AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA) Patch available CNA
- AMD Radeon™ RX Vega Series Graphics Cards VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 26.1.1 (23.19.24) Patch available CNA
- AMD Radeon™ VII VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 26.1.1 (23.19.24) Patch available CNA
- AMD Radeon™ PRO WX 8000/9000 Series Graphics Cards VendorAMD Affected — Fixed in AMD Software: PRO Edition 26.Q1 (23.19.24) Patch available CNA
- AMD Radeon™ PRO VII VendorAMD Affected — Fixed in AMD Software: PRO Edition 26.Q1 (23.19.24) Patch available CNA
CPE configurations NVD · 19
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:amd:radeon_software:*:*:*:*:pro:*:*:* | before 26.q1 | Vulnerable | AMD |
| cpe:2.3:h:amd:radeon_pro_vii:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:a:amd:radeon_software:*:*:*:*:pro:*:*:* | before 25.q3.1 | Vulnerable | AMD |
| cpe:2.3:h:amd:radeon_pro_w5500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w5500x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w5700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w5700x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6300m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:a:amd:radeon_software:*:*:*:*:pro:*:*:* Versions before 26.q1 Vulnerable ·AMD
- cpe:2.3:h:amd:radeon_pro_vii:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:a:amd:radeon_software:*:*:*:*:pro:*:*:* Versions before 25.q3.1 Vulnerable ·AMD
- cpe:2.3:h:amd:radeon_pro_w5500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w5500x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w5700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w5700x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6300m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Show 9 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:amd:radeon_pro_w6500m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6600m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6600x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6800x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6800x_duo:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6900x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:a:amd:cleanup_utility:25.20.00.00:*:*:*:*:*:*:* | 25.20.00.00 | Vulnerable | AMD |
- cpe:2.3:h:amd:radeon_pro_w6500m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6600m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6600x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6800x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6800x_duo:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6900x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:a:amd:cleanup_utility:25.20.00.00:*:*:*:*:*:*:* Versions 25.20.00.00 Vulnerable ·AMD
Remediation
- Fix · CNA AMD Radeon™ RX 5000 Series Graphics Products (AMD) Fixed in AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01 RDNA3+, 25.10.33.02 RDNA1/RDNA2)
- Fix · CNA AMD Radeon™ PRO W5000 Series Graphics Products (AMD) Fixed in AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA)
- Fix · CNA AMD Radeon™ RX 6000 Series Graphics Products (AMD) Fixed in AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01 RDNA3+, 25.10.33.02 RDNA1/RDNA2)
- Fix · CNA AMD Radeon™ RX 7000 Series Graphics Products (AMD) Fixed in AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01 RDNA3+, 25.10.33.02 RDNA1/RDNA2)
- Fix · CNA AMD Cleanup Utility (AMD) Fixed in https://www.amd.com/en/resources/support-articles/faqs/GPU-601.html
- Fix · CNA AMD Radeon™ PRO W6000 Series Graphics Products (AMD) Fixed in AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA)
- Fix · CNA AMD Radeon™ PRO W7000 Series Graphics Products (AMD) Fixed in AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA)
- Fix · CNA AMD Radeon™ RX Vega Series Graphics Cards (AMD) Fixed in AMD Software: Adrenalin Edition 26.1.1 (23.19.24)
- Fix · CNA AMD Radeon™ VII (AMD) Fixed in AMD Software: Adrenalin Edition 26.1.1 (23.19.24)
- Fix · CNA AMD Radeon™ PRO WX 8000/9000 Series Graphics Cards (AMD) Fixed in AMD Software: PRO Edition 26.Q1 (23.19.24)
- Fix · CNA AMD Radeon™ PRO VII (AMD) Fixed in AMD Software: PRO Edition 26.Q1 (23.19.24)
Timeline
- 2026-10-02 Threatist record created from CVE-2024-36333
- 2026-10-03 Alias added: GHSA-hvrx-7h2h-759x
References
Sources
- CVE-2024-36333 · CVE Program
- CVE-2024-36333 · NVD
- FIRST EPSS
- GHSA-hvrx-7h2h-759x · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences