CVE-2024-21950 — AMD / AMD Instinct™ MI300X

CVE-2024-21950

AMD / AMD Instinct™ MI300X PUBLISHED

Description (CNA)

An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially resulting in loss of confidentiality or availability.

Affected (CNA)

Vendor / product	Versions
AMD / AMD Instinct™ MI300X	unaffected No fix planned
AMD / AMD Instinct™ MI300A	unaffected No fix planned
AMD / AMD Instinct™ MI325X	unaffected No fix planned
AMD / AMD Instinct™ MI308X	unaffected No fix planned

CWE

CWE-125

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.