Veille CVE

Recherche « AMD Instinct™ MI300X »

10 CVE

Critique 1 Élevée 3 Moyenne 2 Faible 4 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « AMD Instinct™ MI300X » ✕
  1. CVE-2026-43598 7.7 Élevée

    AMD Instinct™ MI210 · AMD Instinct™ MI250 · AMD Instinct™ MI300A · AMD Instinct™ MI300X

    Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution.

  2. CVE-2026-0481 9.2 Critique

    AMD Instinct™ MI210 · AMD Instinct™ MI250 · AMD Instinct™ MI300A · AMD Instinct™ MI300X

    Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in loss of availability

  3. CVE-2025-52532 2.0 Faible

    AMD Radeon™ PRO V620 · AMD Radeon™ PRO V710 · AMD Instinct™ MI250 · AMD Instinct™ MI308X

    A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an attacker to trigger a heap-based buffer overflow, potentially resulting in denial-of-service within the vulnerable system context.

  4. CVE-2024-36323 8.8 Élevée

    AMD Radeon™ RX 7000 Series Graphics Products · AMD Radeon™ PRO W7000 Series Graphics Products · AMD Instinct™ MI308X · AMD Instinct™ MI325X

    Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data.

  5. CVE-2024-21950 1.8 Faible

    AMD Instinct™ MI300X · AMD Instinct™ MI300A · AMD Instinct™ MI325X · AMD Instinct™ MI308X

    An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially resulting in loss of confidentiality or availability.

  6. CVE-2026-0428 1.8 Faible

    AMD Instinct™ MI300A · AMD Instinct™ MI300X · AMD Instinct™ MI308X · AMD Instinct™ MI325X

    Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially resulting in unexpected behavior.

  7. CVE-2026-0427 4.6 Moyenne

    AMD Instinct™ MI210 · AMD Instinct™ MI300X · AMD Instinct™ MI325X · AMD Radeon™ PRO V710

    Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared resources from another Guest VM, potentially resulting in the loss of confidentiality, integrity, or availability.

  8. CVE-2025-66664 4.6 Moyenne

    AMD Radeon™ RX 6000 Series Graphics Products · AMD Radeon™ RX 7000 Series Graphics Products · AMD Radeon™ PRO W6000 Series Graphics Products · AMD Radeon™ PRO W7000 Series Graphics Products

    Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read, potentially resulting in SOC Driver memory contents exposure or an exception

  9. CVE-2025-66660 1.8 Faible

    AMD Radeon™ RX 6000 Series Graphics Products · AMD Radeon™ RX 7000 Series Graphics Products · AMD Radeon™ PRO W6000 Series Graphics Products · AMD Radeon™ PRO W7000 Series Graphics Products

    Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting in unexpected behavior.

  10. CVE-2025-54517 8.5 Élevée

    AMD Instinct™ MI250 · AMD Instinct™ MI308X · AMD Instinct™ MI300A · AMD Instinct™ MI300X

    Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution.