6.0
Medium
CVE-2024-36346 Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to…
Description
Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to send arbitrary input data potentially causing a GPU Reset condition.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Instinct™ MI300A | Versions not published | |
| AMD Instinct™ MI300X | Versions not published |
References
- www.amd.com www.amd.com
Timeline
- Published
- Last modified
Other CVEs of AMD Instinct™ MI300A
The 23 CVEs of AMD Instinct™ MI300A →
CVE-2026-43603
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of…
6.9
Medium
CVE-2026-43598
Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank…
7.7
High
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI…
7.4
High
CVE-2026-0481
Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to…
9.2
Critical