Veille CVE

Recherche « AMD Instinct™ MI300A »

11 CVE

Critique 1 Élevée 4 Moyenne 2 Faible 4 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « AMD Instinct™ MI300A » ✕
  1. CVE-2026-43598 7.7 Élevée

    AMD Instinct™ MI210 · AMD Instinct™ MI250 · AMD Instinct™ MI300A · AMD Instinct™ MI300X

    Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution.

  2. CVE-2023-20577 7.4 Élevée

    AMD 2nd Gen AMD EPYC™ Processors · AMD 3rd Gen AMD EPYC™ Processors · AMD 4th Gen AMD EPYC™ Processors · AMD Instinct™ MI300A

    A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution.

  3. CVE-2026-0481 9.2 Critique

    AMD Instinct™ MI210 · AMD Instinct™ MI250 · AMD Instinct™ MI300A · AMD Instinct™ MI300X

    Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in loss of availability

  4. CVE-2025-52532 2.0 Faible

    AMD Radeon™ PRO V620 · AMD Radeon™ PRO V710 · AMD Instinct™ MI250 · AMD Instinct™ MI308X

    A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an attacker to trigger a heap-based buffer overflow, potentially resulting in denial-of-service within the vulnerable system context.

  5. CVE-2024-36323 8.8 Élevée

    AMD Radeon™ RX 7000 Series Graphics Products · AMD Radeon™ PRO W7000 Series Graphics Products · AMD Instinct™ MI308X · AMD Instinct™ MI325X

    Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data.

  6. CVE-2024-21950 1.8 Faible

    AMD Instinct™ MI300X · AMD Instinct™ MI300A · AMD Instinct™ MI325X · AMD Instinct™ MI308X

    An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially resulting in loss of confidentiality or availability.

  7. CVE-2026-0428 1.8 Faible

    AMD Instinct™ MI300A · AMD Instinct™ MI300X · AMD Instinct™ MI308X · AMD Instinct™ MI325X

    Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially resulting in unexpected behavior.

  8. CVE-2025-66664 4.6 Moyenne

    AMD Radeon™ RX 6000 Series Graphics Products · AMD Radeon™ RX 7000 Series Graphics Products · AMD Radeon™ PRO W6000 Series Graphics Products · AMD Radeon™ PRO W7000 Series Graphics Products

    Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read, potentially resulting in SOC Driver memory contents exposure or an exception

  9. CVE-2025-66660 1.8 Faible

    AMD Radeon™ RX 6000 Series Graphics Products · AMD Radeon™ RX 7000 Series Graphics Products · AMD Radeon™ PRO W6000 Series Graphics Products · AMD Radeon™ PRO W7000 Series Graphics Products

    Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting in unexpected behavior.

  10. CVE-2025-54517 8.5 Élevée

    AMD Instinct™ MI250 · AMD Instinct™ MI308X · AMD Instinct™ MI300A · AMD Instinct™ MI300X

    Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution.

  11. CVE-2024-36315 5.7 Moyenne

    AMD EPYC™ Series 9004 Processors · AMD EPYC™Series 4004 Processors · AMD EPYC™ 8004 Series Processors · AMD Instinct™ MI300A Series Processors

    Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality.