AMD AMD Instinct™ MI308X

Name: AMD AMD Instinct™ MI308X
Brand: AMD

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical0high0medium0low

updated 2026-10-28

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-0481US	—	0.31% (24th)	—	DME v1.4.1.2 and v1.4.0.1	2026-05-15	< DME v1.4.1.2 and v1.4.0.1
CVE-2024-36342US	—	0.17% (7th)	—	ROCm 6.4	2025-09-06	< ROCm 6.4
CVE-2025-54517US	—	0.15% (4th)	—	GIM Driver 8.4	2026-05-15	< GIM Driver 8.4
CVE-2024-36319US	—	0.15% (4th)	—	ROCm 6.2.4	2026-02-12	< ROCm 6.2.4
CVE-2025-66664US	—	0.11% (1st)	—	ROCm 6.4.2	2026-05-15	< ROCm 6.4.2
CVE-2026-0428US	—	0.10% (1st)	—	ROCm 6.4.2	2026-05-15	< ROCm 6.4.2
CVE-2025-66660US	—	0.10% (1st)	—	ROCm 6.4.2	2026-05-15	< ROCm 6.4.2
CVE-2024-36323US	—	0.10% (1st)	—	ROC 6.3	2026-05-15	< ROC 6.3
CVE-2024-21950US	—	0.10% (1st)	—	No fix planned	2026-05-15	< No fix planned
CVE-2025-52532US	—	0.07% (0th)	—	GIM Driver 8.4	2026-05-15	< GIM Driver 8.4

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read2 CVEs
CWE-1284Improper Validation of Specified Quantity in Input2 CVEs
CWE-1191On-Chip Debug and Test Interface With Improper Access Control1 CVEs
CWE-1285Improper Validation of Specified Index, Position, or Offset in Input1 CVEs
CWE-1327Binding to an Unrestricted IP Address1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.