Advisories · Technology
AMD Instinct™ MI308X.
Every CVE that names AMD Instinct™ MI308X among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.7 High
Untrusted pointer dereference in AMD Instinct™ MI210 and others
- AMD Instinct™ MI210
- AMD Instinct™ MI250
- Memory corruption
- CVSS 9.2 CriticalCritical · CVSS 9+
Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in lo…
- AMD Instinct™ MI210
- AMD Instinct™ MI250
- CWE-1327
- CVSS 1.8 Low
Out-of-bounds read in AMD Instinct™ MI300X and others
- AMD Instinct™ MI300X
- AMD Instinct™ MI300A
- Memory corruption
- CVSS 2.0 Low
Time-of-check time-of-use race condition in AMD Radeon™ PRO V620 and others
- AMD Radeon™ PRO V620
- AMD Radeon™ PRO V710
- Race condition
- CVSS 8.8 High
Improper access control in AMD Radeon™ RX 7000 Series Graphics Products and others
- AMD Radeon™ RX 7000 Series Graphics Products
- AMD Radeon™ PRO W7000 Series Graphics Products
- Broken access control
- CVSS 8.5 High
Out-of-bounds write in AMD Instinct™ MI250 and others
- AMD Instinct™ MI250
- AMD Instinct™ MI308X
- Memory corruption
- CVSS 1.8 Low
Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting…
- AMD Radeon™ RX 6000 Series Graphics Products
- AMD Radeon™ RX 7000 Series Graphics Products
- CWE-1284
- CVSS 4.6 Medium
Out-of-bounds read in AMD Radeon™ RX 6000 Series Graphics Products and others
- AMD Radeon™ RX 6000 Series Graphics Products
- AMD Radeon™ RX 7000 Series Graphics Products
- Memory corruption
- CVSS 1.8 Low
Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially resulti…
- AMD Instinct™ MI300A
- AMD Instinct™ MI300X
- CWE-1284
- CVSS 6.3 Medium
Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potential…
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics; AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ AI MAX Series Processors
- CWE-1191