AMD Instinct™ MI300A vulnerabilities
8 known vulnerabilities in AMD Instinct™ MI300A from AMD. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.7 High severity
AMD Instinct™ MI210: Untrusted Pointer Dereference
Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution.
- 7.4 High severity
2nd Gen AMD EPYC™ Processors: Stack-based Buffer Overflow
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution.
- 9.2 Critical severity
AMD Instinct™ MI210: Binding to an Unrestricted IP Address
Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in loss of availability
- 8.8 High severity
AMD Radeon™ RX 7000 Series Graphics Products: Improper Access Control
Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write acces
- 8.4 High severity
AMD Radeon™ RX 5000 Series Graphics Products: Access of Resource Using Incompatible Type
Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External Global Memory Interconnect Trusted Agent (XGMI TA) leading to a memory safety violation potentially resulting in loss of confidentiality, inte
- 7.8 High severity
AMD Radeon™ RX 5000 Series Graphics Products: Time-of-check Time-of-use (TOCTOU) Race Condition
A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality,
- 7.8 High severity
AMD Radeon™ RX 5000 Series Graphics Products: Time-of-check Time-of-use (TOCTOU) Race Condition
A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, or availability.
- 7.1 High severity
AMD EPYC™ 9004 Series Processors: Improper Access Control for Volatile Memory Containing Boot Code
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.