Back to Database
Status published
High
CVE-2024-36333
A DLL hijacking vulnerability in the AMD Cleanup Utility could...
Vulnerability Description
A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-36333
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Reported through AMD Bug Bounty Program
More from AMD
View All →CVE-2025-66664
Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC...
Medium
4.6
CVE-2025-66660
Insufficient parameter sanitization in TEE SOC Driver could allow an...
Low
1.8
CVE-2025-62628
Unsafe OpenSSL initialization within some AMD optional tools may allow...
High
7
CVE-2025-62627
An untrusted pointer dereference in the ionic cloud driver for...
High
7.2
CVE-2025-62626
Improper handling of insufficient entropy in the AMD CPUs could...
High
7.2
Affected Vendor
Affected Software
AMD Radeon™ RX 5000 Series Graphics Products, AMD Radeon™ PRO W5000 Series Graphics Products, AMD Radeon™ RX 6000 Series Graphics Products, AMD Radeon™ RX 7000 Series Graphics Products, AMD Cleanup Utility, AMD Radeon™ PRO W6000 Series Graphics Products, AMD Radeon™ PRO W7000 Series Graphics Products, AMD Radeon™ RX Vega Series Graphics Cards, AMD Radeon™ VII, AMD Radeon™ PRO WX 8000/9000 Series Graphics Cards, AMD Radeon™ PRO VII
Vulnerable Versions:
AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01 RDNA3+, 25.10.33.02 RDNA1/RDNA2), AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA), https://www.amd.com/en/resources/support-articles/faqs/GPU-601.html, AMD Software: Adrenalin Edition 26.1.1 (23.19.24), AMD Software: PRO Edition 26.Q1 (23.19.24)
Timeline
Official Publish:
May 15th, 2026
Last Modified:
May 16th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.