Advisories · Technology
AMD Instinct™ MI300A.
Every CVE that names AMD Instinct™ MI300A among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.7 High
Untrusted pointer dereference in AMD Instinct™ MI210 and others
- AMD Instinct™ MI210
- AMD Instinct™ MI250
- Memory corruption
- CVSS 7.4 High
Stack-based buffer overflow in 2nd Gen AMD EPYC™ Processors and others
- 2nd Gen AMD EPYC™ Processors
- 3rd Gen AMD EPYC™ Processors
- Memory corruption
- CVSS 9.2 CriticalCritical · CVSS 9+
Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in lo…
- AMD Instinct™ MI210
- AMD Instinct™ MI250
- CWE-1327
- CVSS 1.8 Low
Out-of-bounds read in AMD Instinct™ MI300X and others
- AMD Instinct™ MI300X
- AMD Instinct™ MI300A
- Memory corruption
- CVSS 2.0 Low
Time-of-check time-of-use race condition in AMD Radeon™ PRO V620 and others
- AMD Radeon™ PRO V620
- AMD Radeon™ PRO V710
- Race condition
- CVSS 8.8 High
Improper access control in AMD Radeon™ RX 7000 Series Graphics Products and others
- AMD Radeon™ RX 7000 Series Graphics Products
- AMD Radeon™ PRO W7000 Series Graphics Products
- Broken access control
- CVSS 8.5 High
Out-of-bounds write in AMD Instinct™ MI250 and others
- AMD Instinct™ MI250
- AMD Instinct™ MI308X
- Memory corruption
- CVSS 1.8 Low
Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting…
- AMD Radeon™ RX 6000 Series Graphics Products
- AMD Radeon™ RX 7000 Series Graphics Products
- CWE-1284
- CVSS 4.6 Medium
Out-of-bounds read in AMD Radeon™ RX 6000 Series Graphics Products and others
- AMD Radeon™ RX 6000 Series Graphics Products
- AMD Radeon™ RX 7000 Series Graphics Products
- Memory corruption
- CVSS 1.8 Low
Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially resulti…
- AMD Instinct™ MI300A
- AMD Instinct™ MI300X
- CWE-1284
- CVSS 8.4 High
Type confusion in AMD Radeon™ RX 5000 Series Graphics Products and others
- AMD Radeon™ RX 5000 Series Graphics Products
- AMD Radeon™ PRO W5000 Series Graphics Products
- Memory corruption
- CVSS 6.3 Medium
Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potential…
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics; AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ AI MAX Series Processors
- CWE-1191
- CVSS 7.1 High
Time-of-check time-of-use race condition in AMD Radeon™ RX 5000 Series Graphics Products and others
- AMD Radeon™ RX 5000 Series Graphics Products
- AMD Radeon™ PRO W5000 Series Graphics Products
- Race condition
- CVSS 7.1 High
Time-of-check time-of-use race condition in AMD Radeon™ RX 5000 Series Graphics Products and others
- AMD Radeon™ RX 5000 Series Graphics Products
- AMD Radeon™ PRO W5000 Series Graphics Products
- Race condition
- CVSS 7.1 High
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1274
- CVSS 6.1 Medium
Out-of-bounds write in AMD Radeon™ RX 5000 Series Graphics Products and others
- AMD Radeon™ RX 5000 Series Graphics Products
- AMD Radeon™ RX 6000 Series Graphics Products
- Memory corruption
- CVSS 6.0 Medium
Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to send arbitrary input data potentially causing a GPU Reset condition.
- AMD Instinct™ MI300A
- AMD Instinct™ MI300X
- CWE-1284
- CVSS 6.4 Medium
Improper signature verification in AMD EPYC™ 7001 Series and others
- AMD EPYC™ 7001 Series
- AMD EPYC™ 7002 Series
- Weak cryptography or TLS
- CVSS 7.5 High
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
- AMD EPYC™ 7003 Processors
- AMD EPYC™ 9004 Processors
- CWE-1274
- CVSS 5.0 Medium
Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory location not controlled by the attacker, potentially leading to loss of confidential…
- AMD Radeon™ RX 6000 Series Graphics Products
- AMD Radeon™ PRO W6000 Series Graphics Products
- CWE-1284
- CVSS 7.5 High
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
- AMD EPYC™ 7003 Processors
- AMD EPYC™ 9004 Processors
- CWE-1220
- CVSS 7.5 High
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
- AMD EPYC™ 7003 Processors
- AMD EPYC™ 9004 Processors
- CWE-1220