Threat database

Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in loss of availability

An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially resulting in loss of confidentiality or availability.

A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an attacker to trigger a heap-based buffer overflow, potentially resulting in denial-of-service within the vulnerable system context.

CVE-2024-36323 is a high-severity vulnerability affecting AMD Radeon™ RX 7000 Series Graphics Products. It involves improper isolation of the VCN-JPEG hardware register space, which could allow a malicious guest virtual machine or process to access the register space of JPEG cores assigned to another victim VM or process. This unauthorized access could lead to arbitrary read/write operations on the victim's data. The vulnerability has a CVSS 4.0 score of 8.8, indicating a significant risk. No official patch or remediation guidance has been provided by AMD as of the publication date. There are no known exploits in the wild currently reported. The vulnerability relates to CWE-284 (Improper Access Control).

CVE-2024-36333 is a DLL hijacking vulnerability in the AMD Cleanup Utility associated with AMD Radeon™ RX 5000 Series Graphics Products. This flaw could allow an attacker with limited privileges to escalate their privileges, potentially leading to arbitrary code execution. The vulnerability has a high severity rating with a CVSS 4.0 score of 7. No official patch or remediation guidance has been provided by the vendor at this time, and there are no known exploits in the wild.

CVE-2024-36334 is a high-severity vulnerability in AMD Radeon RX 7000 Series Graphics Products involving improper verification of cryptographic signatures in the Radeon RGB tool. This flaw could allow a malicious file placed in the installation directory to execute with elevated privileges, potentially leading to arbitrary code execution. There is no confirmed patch or official remediation available at this time. No known exploits are reported in the wild. Users should monitor AMD advisories for updates.

Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared resources from another Guest VM, potentially resulting in the loss of confidentiality, integrity, or availability.

Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorized access to specific victim range of GPU MMIO register space, potentially causing the host OS to reboot and creating a Denial of Service (DOS) condition.

An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability.

Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privileges and successfully write data, potentially resulting in loss of integrity of availability.

CVE-2025-54517 is a high-severity vulnerability in the AMD Instinct™ MI250 GPU involving an out-of-bounds write in the AMDGV_CMD_GET_DIAG_DATA ioctl handler. This flaw could allow a local user with limited privileges to escalate their privileges potentially via remote code execution. The vulnerability is classified under CWE-787 (Out-of-bounds Write) and has a CVSS 4.0 base score of 8.5, indicating significant impact. No official patch or remediation guidance has been provided by AMD as of the published date. There are no known exploits in the wild at this time. Users should monitor AMD advisories for updates on fixes or mitigations.

CVE-2025-66660 is a low-severity vulnerability in AMD Radeon RX 6000 Series graphics products involving insufficient parameter sanitization in the TEE SOC Driver. An attacker with high privileges could send a malformed command (DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT) that causes incorrect shared memory mapping, potentially leading to unexpected behavior. There is no confirmed patch or official remediation available at this time, and no known exploits have been reported in the wild.

CVE-2025-66664 is a medium severity vulnerability in AMD Radeon RX 6000 Series graphics products involving an out-of-bounds read due to insufficient parameter sanitization in the AMD Secure Processor TEE SOC Driver. An attacker with high privileges could issue a malformed SR-IOV command to trigger this flaw, potentially exposing SOC Driver memory contents or causing an exception. There is no confirmed patch or official remediation available at this time. No known exploits are reported in the wild.

CVE-2026-0428 is a low-severity vulnerability in the AMD Instinct™ MI300A related to improper validation of input parameters in the TEE SOC Driver. Specifically, insufficient sanitization of a command (DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REG) allows an attacker with high privileges to write invalid data to a remote Die, which may cause unexpected behavior. The vulnerability has a CVSS 4.0 base score of 1.8, indicating low impact and complexity. There is no vendor-provided patch or official remediation guidance available at this time, and no known exploits in the wild have been reported. The affected product is not a cloud service, so remediation depends on AMD's release of a fix. No geographic targeting is indicated.

CVE-2025-48516 is a vulnerability in AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics involving insecure default permissions in the AGESA Bootloader Firmware. The issue stems from an insecure default configuration of the DDR5 memory module, allowing a local attacker with user privileges to abuse the unprotected PMIC interface. This could lead to a permanent denial of service or impact the integrity of the memory module. The vulnerability has a medium severity rating with a CVSS score of 6.9. No official patch or remediation guidance has been provided by AMD as of the publication date. There are no known exploits in the wild at this time.

Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with physical access to read or overwrite the contents of cross-chip debug (XCD) registers potentially resulting in loss of data integrity or confidentiality.

CVE-2024-21962 is a high-severity vulnerability in the AMD RAID driver for AMD EPYC™ 4005 Series Processors. It involves improper input validation that could allow an attacker with limited privileges to reference arbitrary memory locations. This flaw may lead to privilege escalation and arbitrary code execution. No official patch or remediation guidance has been provided yet. There are no known exploits in the wild at this time.

CVE-2025-29935 is a high-severity vulnerability involving an out-of-bounds write in the AMD Platform Management Framework (PMF) on AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (Rembrandt R). This flaw could allow an attacker with limited privileges to execute arbitrary code at an elevated privilege level, potentially impacting confidentiality, integrity, and availability of the affected system. The vulnerability has a CVSS 4.0 base score of 8.4, indicating significant risk. As of the published date, no official patch or remediation guidance has been provided by AMD. There are no known exploits in the wild at this time.

A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, potentially resulting in denial of service or crash

CVE-2025-29938 is a high-severity vulnerability in AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, involving an unchecked return value in the AMD Platform Management Framework (PMF). This flaw could allow an attacker with limited privileges to write to arbitrary memory addresses, potentially causing denial of service or arbitrary code execution. There is no official patch or remediation level currently available from AMD. No known exploits are reported in the wild at this time.