VDB

CISA-2024-36346

CISA-2024-36346 PUBLISHED CVSS 6 MEDIUM

Reported by AMD · Published September 6, 2025

Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to send arbitrary input data potentially causing a GPU Reset condition.

Risk Scores

CVSS 3.1
6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected Products

VendorProductVersions
AMDAMD Instinct™ MI300ABKC 21
AMDAMD Instinct™ MI300XBKC 24.13
AMDAMD Instinct™ MI300A*, *
AMDAMD Instinct™ MI300XBKC 24.13, BKC 24.13

Timeline

  • Sep 6, 2025 CVE Published
  • Sep 8, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›