Skip to content
OpenAdvisories
Medium · 6.0 CVE-2024-36346 EUVD-2024-54971GHSA-q8qr-v893-9jp2

Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to send arbitrary input d…

Published Sep 6, 2025 · Updated Sep 8, 2025 · Assigned by AMD

Description

Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to send arbitrary input data potentially causing a GPU Reset condition.

Affected products

VendorProductAffectedFixed
AMD AMD Instinct™ MI300A — BKC 21
AMD AMD Instinct™ MI300X — BKC 24.13

Advisories 1

References