AMD AMD Radeon™ PROV710 vulnerabilities

CVE-2025-52532 Low · 2.0 CWE-367 May 15, 2026

A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent...

A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an attacker to trigger a heap-based buffer overflow, potentially resulting in denial-of-service within the vulnerable system context.

CVE-2026-0427 Medium · 4.6 CWE-459 May 15, 2026

Improper cleanup of shared register resources in GPU firmware could allow an…

Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared resources from another Guest VM, potentially resulting in the loss of confidentiality, integrity, or availability.

CVE-2025-66664 Medium · 4.6 CWE-125 May 15, 2026

Out-of-bounds Read in AMD AMD Radeon™ RX 6000 Series Graphics Products

Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read, potentially resulting in SOC Driver memory contents exposure or an exception

CVE-2025-66660 Low · 1.8 CWE-1284 May 15, 2026

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a…

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting in unexpected behavior.

CVE-2025-54517 High · 8.5 CWE-787 May 15, 2026

Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to...

Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution.

CVE-2024-36332 Medium · 6.8 CWE-1189 May 15, 2026

Improper isolation of GPU HW register space could allow a privileged attacker in…

Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorized access to specific victim range of GPU MMIO register space, potentially causing the host OS to reboot and creating a Denial of Service (DOS) condition.

CVE-2024-36319 Medium · 6.3 CWE-1191 Feb 12, 2026

Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a…

Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potentially impacting confidentiality, integrity and availabilability of the system.

CVE-2025-48518 Medium · 6.9 CWE-787 Feb 11, 2026

Out-of-bounds Write in AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics

Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integrity or denial of service.

CVE-2025-48508 Medium · 6.0 CWE-1245 Feb 11, 2026

Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a…

Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a privileged attacker in a guest virtual machine to control reset operation potentially causing host or GPU crash or reset resulting in denial of service.

CVE-2024-36324 High · 8.8 CWE-787 Feb 11, 2026

Out-of-bounds Write in AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics; AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics

Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution.

CVE-2024-36316 Medium · 5.5 CWE-190 Feb 11, 2026

Integer Overflow or Wraparound in AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics; AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics

The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially resulting in a denial of service

CVE-2023-20514 High · 8.7 CWE-233 Feb 11, 2026

Improper handling of parameters in the AMD Secure Processor (ASP) could allow a…

Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environment resulting in arbitrary code execution