Vulnerabilities of AMD AMD Instinct™ MI300X
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-43603 | A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of… | 6.9 Medium | Nov 3, 2026 |
| CVE-2026-43598 | Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank… | 7.7 High | Oct 6, 2026 |
| CVE-2026-0481 | Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to… | 9.2 Critical | May 15, 2026 |
| CVE-2025-52532 | A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the… | 2.0 Low | May 15, 2026 |
| CVE-2024-36323 | Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to… | 8.8 High | May 15, 2026 |
| CVE-2026-0427 | Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest… | 4.6 Medium | May 15, 2026 |
| CVE-2025-54517 | Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via… | 8.5 High | May 15, 2026 |
| CVE-2025-66660 | Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed… | 1.8 Low | May 15, 2026 |
| CVE-2025-66664 | Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a… | 4.6 Medium | May 15, 2026 |
| CVE-2026-0428 | Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed… | 1.8 Low | May 15, 2026 |
| CVE-2023-31323 | Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External… | 8.4 High | Feb 12, 2026 |
| CVE-2024-36319 | Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously… | 6.3 Medium | Feb 12, 2026 |
| CVE-2023-20548 | A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt… | 7.1 High | Feb 11, 2026 |
| CVE-2023-31324 | A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to… | 7.1 High | Feb 11, 2026 |
| CVE-2025-0034 | Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed… | 4.7 Medium | Sep 6, 2025 |
| CVE-2025-0010 | An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting… | 6.1 Medium | Sep 6, 2025 |
| CVE-2024-36346 | Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to… | 6.0 Medium | Sep 6, 2025 |
| CVE-2024-36342 | Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting… | 8.8 High | Sep 6, 2025 |
| CVE-2023-20508 | Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory… | 5.0 Medium | Feb 11, 2025 |
Other AMD products
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 54
AMD Ryzen™ 7000 Series Desktop Processors 51
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 49
AMD Ryzen™ 5000 Series Desktop Processors 48
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 46
AMD Ryzen™ 3000 Series Desktop Processors 43
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics 41
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics 41
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 38
AMD Ryzen™ Embedded V2000 Series Processors 37
AMD Ryzen™ 8000 Series Desktop Processors 36
AMD Ryzen™ 4000 Series Desktop Processors 33