Advisories · Technology
AMD Instinct™ MI300X.
Every CVE that names AMD Instinct™ MI300X among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.7 High
Untrusted pointer dereference in AMD Instinct™ MI210 and others
- AMD Instinct™ MI210
- AMD Instinct™ MI250
- Memory corruption
- CVSS 9.2 CriticalCritical · CVSS 9+
Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in lo…
- AMD Instinct™ MI210
- AMD Instinct™ MI250
- CWE-1327
- CVSS 1.8 Low
Out-of-bounds read in AMD Instinct™ MI300X and others
- AMD Instinct™ MI300X
- AMD Instinct™ MI300A
- Memory corruption
- CVSS 2.0 Low
Time-of-check time-of-use race condition in AMD Radeon™ PRO V620 and others
- AMD Radeon™ PRO V620
- AMD Radeon™ PRO V710
- Race condition
- CVSS 8.8 High
Improper access control in AMD Radeon™ RX 7000 Series Graphics Products and others
- AMD Radeon™ RX 7000 Series Graphics Products
- AMD Radeon™ PRO W7000 Series Graphics Products
- Broken access control
- CVSS 4.6 Medium
Incomplete cleanup in AMD Instinct™ MI210 and others
- AMD Instinct™ MI210
- AMD Instinct™ MI300X
- CWE-459
- CVSS 8.5 High
Out-of-bounds write in AMD Instinct™ MI250 and others
- AMD Instinct™ MI250
- AMD Instinct™ MI308X
- Memory corruption
- CVSS 1.8 Low
Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting…
- AMD Radeon™ RX 6000 Series Graphics Products
- AMD Radeon™ RX 7000 Series Graphics Products
- CWE-1284
- CVSS 4.6 Medium
Out-of-bounds read in AMD Radeon™ RX 6000 Series Graphics Products and others
- AMD Radeon™ RX 6000 Series Graphics Products
- AMD Radeon™ RX 7000 Series Graphics Products
- Memory corruption
- CVSS 1.8 Low
Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially resulti…
- AMD Instinct™ MI300A
- AMD Instinct™ MI300X
- CWE-1284
- CVSS 8.4 High
Type confusion in AMD Radeon™ RX 5000 Series Graphics Products and others
- AMD Radeon™ RX 5000 Series Graphics Products
- AMD Radeon™ PRO W5000 Series Graphics Products
- Memory corruption
- CVSS 6.3 Medium
Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potential…
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics; AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ AI MAX Series Processors
- CWE-1191
- CVSS 7.1 High
Time-of-check time-of-use race condition in AMD Radeon™ RX 5000 Series Graphics Products and others
- AMD Radeon™ RX 5000 Series Graphics Products
- AMD Radeon™ PRO W5000 Series Graphics Products
- Race condition
- CVSS 7.1 High
Time-of-check time-of-use race condition in AMD Radeon™ RX 5000 Series Graphics Products and others
- AMD Radeon™ RX 5000 Series Graphics Products
- AMD Radeon™ PRO W5000 Series Graphics Products
- Race condition
- CVSS 5.0 Medium
Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to manipulate Redfish® API commands to remove files from the local root directory, potentially…
- AMD Instinct™ MI300X
- CWE-241
- CVSS 5.0 Medium
Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, causing service proces…
- AMD Instinct™ MI300X
- CWE-241
- CVSS 4.7 Medium
Out-of-bounds write in AMD Instinct™ MI300X and others
- AMD Instinct™ MI300X
- AMD Instinct™ MI325X
- Memory corruption
- CVSS 6.1 Medium
Out-of-bounds write in AMD Radeon™ RX 5000 Series Graphics Products and others
- AMD Radeon™ RX 5000 Series Graphics Products
- AMD Radeon™ RX 6000 Series Graphics Products
- Memory corruption
- CVSS 6.0 Medium
Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to send arbitrary input data potentially causing a GPU Reset condition.
- AMD Instinct™ MI300A
- AMD Instinct™ MI300X
- CWE-1284
- CVSS 5.0 Medium
Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory location not controlled by the attacker, potentially leading to loss of confidential…
- AMD Radeon™ RX 6000 Series Graphics Products
- AMD Radeon™ PRO W6000 Series Graphics Products
- CWE-1284