CVE-2025-0034: AMD Instinct MI300X
Medium severity, CVSS 4.7. EPSS: 0.1% chance of exploitation in the next 30 days.
Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_SPATIAL_PART and cause read or write past the end of allocated arrays, potentially resulting in a loss of platform integrity or denial of service.
Affected products
Published 2025-09-06. Last modified 2026-06-17.