AMD Radeon Pro v710 vulnerabilities
14 CVEs affecting AMD Radeon Pro v710, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-52532, published 2026-05-15.
More from AMD.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2024-36324, published 2026-02-11. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution.
- CVE-2024-36316, published 2026-02-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially resulting in a denial of service
- CVE-2025-48508, published 2026-02-11. Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days. Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a privileged attacker in a guest virtual machine to control reset operation potentially causing host or GPU crash or…
- CVE-2024-36353, published 2025-03-02. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over memory values potentially leading to loss of confidentiality.
- CVE-2025-48518, published 2026-02-11. Medium severity, CVSS 6.9. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integrity or denial of service.
- CVE-2025-54517, published 2026-05-15. High severity, CVSS 8.5. EPSS: 0.1% chance of exploitation in the next 30 days. Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution.
- CVE-2024-36319, published 2026-02-12. Medium severity, CVSS 6.3. EPSS: 0.1% chance of exploitation in the next 30 days. Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers,…
- CVE-2023-20508, published 2025-02-12. Medium severity, CVSS 5.0. EPSS: 0.1% chance of exploitation in the next 30 days. Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory location not controlled by the attacker, potentially leading to loss of…
- CVE-2024-21971, published 2025-02-12. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading…
- CVE-2026-0427, published 2026-05-15. Medium severity, CVSS 4.6. EPSS: 0.1% chance of exploitation in the next 30 days. Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared resources from another Guest VM,…
Latest
- CVE-2025-52532, published 2026-05-15. Low severity, CVSS 2.0. EPSS: 0.1% chance of exploitation in the next 30 days. A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an…
- CVE-2025-66664, published 2026-05-15. Medium severity, CVSS 4.6. EPSS: 0.1% chance of exploitation in the next 30 days. Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read,…
- CVE-2025-66660, published 2026-05-15. Low severity, CVSS 1.8. EPSS: 0.1% chance of exploitation in the next 30 days. Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting…
- CVE-2024-36332, published 2026-05-15. Medium severity, CVSS 6.8. EPSS: 0.1% chance of exploitation in the next 30 days. Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorized access to specific victim range of GPU MMIO register…