AMD Instinct MI325X vulnerabilities

13 CVEs affecting AMD Instinct MI325X, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-43598, published 2026-10-06.

More from AMD.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-43598, published 2026-10-06. High severity, CVSS 7.7. EPSS: 0.5% chance of exploitation in the next 30 days. Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer,…
• CVE-2026-0481, published 2026-05-15. Critical severity, CVSS 9.2. EPSS: 0.3% chance of exploitation in the next 30 days. Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in…
• CVE-2024-36342, published 2025-09-06. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execution.
• CVE-2025-54517, published 2026-05-15. High severity, CVSS 8.5. EPSS: 0.1% chance of exploitation in the next 30 days. Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution.
• CVE-2024-36319, published 2026-02-12. Medium severity, CVSS 6.3. EPSS: 0.1% chance of exploitation in the next 30 days. Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers,…
• CVE-2025-0034, published 2025-09-06. Medium severity, CVSS 4.7. EPSS: 0.1% chance of exploitation in the next 30 days. Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_SPATIAL_PART and cause read or write past the end of allocated arrays,…
• CVE-2026-0427, published 2026-05-15. Medium severity, CVSS 4.6. EPSS: 0.1% chance of exploitation in the next 30 days. Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared resources from another Guest VM,…
• CVE-2025-66664, published 2026-05-15. Medium severity, CVSS 4.6. EPSS: 0.1% chance of exploitation in the next 30 days. Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read,…
• CVE-2026-0428, published 2026-05-15. Low severity, CVSS 1.8. EPSS: 0.1% chance of exploitation in the next 30 days. Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially…
• CVE-2025-66660, published 2026-05-15. Low severity, CVSS 1.8. EPSS: 0.1% chance of exploitation in the next 30 days. Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting…

Latest

• CVE-2025-52532, published 2026-05-15. Low severity, CVSS 2.0. EPSS: 0.1% chance of exploitation in the next 30 days. A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an…
• CVE-2024-36323, published 2026-05-15. High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days. Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a…
• CVE-2024-21950, published 2026-05-15. Low severity, CVSS 1.8. EPSS: 0.1% chance of exploitation in the next 30 days. An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially resulting in loss of…