AMD AMD Instinct™ MI300A

Name: AMD AMD Instinct™ MI300A
Brand: AMD

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical2high0medium0low

updated 2026-10-27

vulnerabilities (21)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-0481US	—	0.31% (23rd)	—	DME v1.4.1.2 and v1.4.0.1	2026-05-15	< DME v1.4.1.2 and v1.4.0.1
CVE-2023-31345US	—	0.18% (8th)	—	MI300API 1.0.0.5	2025-02-12	< MI300API 1.0.0.5
CVE-2023-31343US	—	0.18% (8th)	—	MI300API 1.0.0.5	2025-02-11	< MI300API 1.0.0.5
CVE-2023-31342US	—	0.18% (8th)	—	MI300API 1.0.0.5	2025-02-11	< MI300API 1.0.0.5
CVE-2024-36342US	—	0.17% (7th)	—	ROCm 6.4	2025-09-06	< ROCm 6.4
CVE-2025-29950US	—	0.16% (6th)	—	MI300A 1.0.0.B	2026-02-10	< MI300A 1.0.0.B
CVE-2023-31323US	—	0.15% (4th)	—	ROCm 6.2	2026-02-12	< ROCm 6.2
CVE-2025-54517US	—	0.15% (4th)	—	GIM Driver 8.4	2026-05-15	< GIM Driver 8.4
CVE-2024-36319US	—	0.15% (4th)	—	ROCm 6.2.4	2026-02-12	< ROCm 6.2.4
CVE-2023-20508US	—	0.14% (3rd)	—	MI300PI 1.0.0.5	2025-02-12	< MI300PI 1.0.0.5
CVE-2024-36346US	—	0.13% (3rd)	—	BKC 21	2025-09-06	< BKC 21
CVE-2025-0010US	—	0.12% (2nd)	—	ROCm 6.3	2025-09-06	< ROCm 6.3
CVE-2025-66664US	—	0.11% (1st)	—	BKC 26 (ROCm 7.0.1)	2026-05-15	< BKC 26 (ROCm 7.0.1)
CVE-2023-31324US	high7.8	0.11% (1st)	—	ROCm 6.4	2026-02-11	< ROCm 6.4
CVE-2023-20548US	high7.8	0.11% (1st)	—	ROCm 6.2	2026-02-11	< ROCm 6.2
CVE-2024-36347US	—	0.11% (1st)	—	MI300PI_SR5 1.0.0.8	2025-06-27	< MI300PI_SR5 1.0.0.8
CVE-2026-0428US	—	0.10% (1st)	—	BKC 26	2026-05-15	< BKC 26
CVE-2025-66660US	—	0.10% (1st)	—	BKC 26	2026-05-15	< BKC 26
CVE-2024-36323US	—	0.10% (1st)	—	ROCm 6.3	2026-05-15	< ROCm 6.3
CVE-2024-21950US	—	0.10% (1st)	—	No fix planned	2026-05-15	< No fix planned
CVE-2025-52532US	—	0.07% (0th)	—	GIM Driver 8.4	2026-05-15	< GIM Driver 8.4

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-1284Improper Validation of Specified Quantity in Input4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition3 CVEs
CWE-1220Insufficient Granularity of Access Control2 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-1274Improper Access Control for Volatile Memory Containing Boot Code2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-1191On-Chip Debug and Test Interface With Improper Access Control1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)21 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan