AMD Radeon Instinct MI25 Graphics Products vulnerabilities

4 CVEs affecting AMD Radeon Instinct MI25 Graphics Products, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-20511, published 2026-08-31.

More from AMD.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-20511, published 2026-08-31. Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days. Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potentially leading to arbitrary code execution.
• CVE-2023-20516, published 2025-09-06. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Improper handling of insufficiency privileges in the ASP could allow a privileged attacker to modify Translation Map Registers (TMRs) potentially resulting in loss of confidentiality or integrity.
• CVE-2021-26377, published 2025-09-06. Medium severity, CVSS 4.1. EPSS: 0.2% chance of exploitation in the next 30 days. Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious userspace process to trigger an integer overflow, leading to a potential denial of…
• CVE-2024-36352, published 2025-09-06. High severity, CVSS 8.4. EPSS: 0.1% chance of exploitation in the next 30 days. Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary writes or denial of service.