CVE-2024-36353 MEDIUM

CVE-2024-36353

Weakness CWE-459
Published March 2, 2025
Last update October 14, 2025

CVSS base score

6.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

What the vulnerability does

01Description

Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over memory values potentially leading to loss of confidentiality.

Key dates

02Disclosure timeline

March 2, 2025 CVE published
October 14, 2025 Record updated