Vulnerabilidades do AMD AMD Radeon™ PROV710

CVE-2025-52532 Baixa · 2.0 CWE-367 15/05/2026

A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent...

A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an attacker to trigger a heap-based buffer overflow, potentially resulting in denial-of-service within the vulnerable system context.

CVE-2026-0427 Média · 4.6 CWE-459 15/05/2026

Improper cleanup of shared register resources in GPU firmware could allow an…

Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared resources from another Guest VM, potentially resulting in the loss of confidentiality, integrity, or availability.

CVE-2025-66664 Média · 4.6 CWE-125 15/05/2026

Out-of-bounds Read em AMD AMD Radeon™ RX 6000 Series Graphics Products

Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read, potentially resulting in SOC Driver memory contents exposure or an exception

CVE-2025-66660 Baixa · 1.8 CWE-1284 15/05/2026

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a…

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting in unexpected behavior.

CVE-2025-54517 Alta · 8.5 CWE-787 15/05/2026

Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to...

Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution.

CVE-2024-36332 Média · 6.8 CWE-1189 15/05/2026

Improper isolation of GPU HW register space could allow a privileged attacker in…

Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorized access to specific victim range of GPU MMIO register space, potentially causing the host OS to reboot and creating a Denial of Service (DOS) condition.

CVE-2024-36319 Média · 6.3 CWE-1191 12/02/2026

Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a…

Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potentially impacting confidentiality, integrity and availabilability of the system.

CVE-2025-48518 Média · 6.9 CWE-787 11/02/2026

Out-of-bounds Write em AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics

Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integrity or denial of service.

CVE-2025-48508 Média · 6.0 CWE-1245 11/02/2026

Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a…

Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a privileged attacker in a guest virtual machine to control reset operation potentially causing host or GPU crash or reset resulting in denial of service.

CVE-2024-36324 Alta · 8.8 CWE-787 11/02/2026

Out-of-bounds Write em AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics; AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics

Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution.

CVE-2024-36316 Média · 5.5 CWE-190 11/02/2026

Integer Overflow or Wraparound em AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics; AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics

The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially resulting in a denial of service

CVE-2023-20514 Alta · 8.7 CWE-233 11/02/2026

Improper handling of parameters in the AMD Secure Processor (ASP) could allow a…

Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environment resulting in arbitrary code execution