CVE-2024-36346: AMD Instinct MI300A

Medium severity, CVSS 6.0. EPSS: 0.1% chance of exploitation in the next 30 days.

Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to send arbitrary input data potentially causing a GPU Reset condition.

Affected products

  • AMD AMD Instinct MI300A
  • AMD AMD Instinct MI300X

Published 2025-09-06. Last modified 2026-06-17.