CVE-2024-36346 — AMD / AMD Instinct™ MI300A

CVE-2024-36346

AMD / AMD Instinct™ MI300A PUBLISHED

Description (CNA)

Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to send arbitrary input data potentially causing a GPU Reset condition.

Affected (CNA)

Vendor / product	Versions
AMD / AMD Instinct™ MI300A	unaffected BKC 21
AMD / AMD Instinct™ MI300X	unaffected BKC 24.13

CWE

CWE-1284

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.