AMD Instinct MI250X vulnerabilities

2 CVEs affecting AMD Instinct MI250X, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-43598, published 2026-10-06.

More from AMD.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-43598, published 2026-10-06. High severity, CVSS 7.7. EPSS: 0.5% chance of exploitation in the next 30 days. Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer,…
• CVE-2026-0481, published 2026-05-15. Critical severity, CVSS 9.2. EPSS: 0.3% chance of exploitation in the next 30 days. Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in…