AMD Instinct MI300A vulnerabilities

21 CVEs affecting AMD Instinct MI300A, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-43598, published 2026-10-06.

More from AMD.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-43598, published 2026-10-06. High severity, CVSS 7.7. EPSS: 0.5% chance of exploitation in the next 30 days. Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer,…
• CVE-2026-0481, published 2026-05-15. Critical severity, CVSS 9.2. EPSS: 0.3% chance of exploitation in the next 30 days. Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in…
• CVE-2023-31345, published 2025-02-12. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
• CVE-2023-31343, published 2025-02-11. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
• CVE-2023-31342, published 2025-02-11. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
• CVE-2024-36342, published 2025-09-06. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execution.
• CVE-2025-29950, published 2026-02-10. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.
• CVE-2023-20577, published 2026-09-02. High severity, CVSS 7.4. EPSS: 0.2% chance of exploitation in the next 30 days. A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution.
• CVE-2023-31323, published 2026-02-12. High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days. Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External Global Memory Interconnect Trusted Agent (XGMI TA) leading to a memory safety…
• CVE-2025-54517, published 2026-05-15. High severity, CVSS 8.5. EPSS: 0.1% chance of exploitation in the next 30 days. Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution.

Latest

• CVE-2025-52532, published 2026-05-15. Low severity, CVSS 2.0. EPSS: 0.1% chance of exploitation in the next 30 days. A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an…
• CVE-2024-36323, published 2026-05-15. High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days. Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a…
• CVE-2024-21950, published 2026-05-15. Low severity, CVSS 1.8. EPSS: 0.1% chance of exploitation in the next 30 days. An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially resulting in loss of…
• CVE-2026-0428, published 2026-05-15. Low severity, CVSS 1.8. EPSS: 0.1% chance of exploitation in the next 30 days. Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially…
• CVE-2025-66664, published 2026-05-15. Medium severity, CVSS 4.6. EPSS: 0.1% chance of exploitation in the next 30 days. Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read,…
• CVE-2025-66660, published 2026-05-15. Low severity, CVSS 1.8. EPSS: 0.1% chance of exploitation in the next 30 days. Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting…