AMD Instinct MI300A Series Processors vulnerabilities

4 CVEs affecting AMD Instinct MI300A Series Processors, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-0432, published 2026-05-15.

More from AMD.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-54502, published 2026-04-16. High severity, CVSS 7.5. EPSS: 0.1% chance of exploitation in the next 30 days. Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially…
• CVE-2024-36315, published 2026-05-13. Medium severity, CVSS 5.7. EPSS: 0.1% chance of exploitation in the next 30 days. Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of…
• CVE-2025-48512, published 2026-05-15. High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days. Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve privilege escalation resulting in arbitrary…
• CVE-2026-0432, published 2026-05-15. High severity, CVSS 8.5. EPSS: 0.1% chance of exploitation in the next 30 days. Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.