Skip to content
Sign in
4.6 Medium

CVE-2025-66664 Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a…

Description

Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read, potentially resulting in SOC Driver memory contents exposure or an exception

Affected products and versions

Product Affected versions Fixed in
AMD Radeon™ RX 6000 Series Graphics Products Versions not published
AMD Radeon™ RX 7000 Series Graphics Products Versions not published
AMD Radeon™ PRO W6000 Series Graphics Products Versions not published
AMD Radeon™ PRO W7000 Series Graphics Products Versions not published
AMD Instinct™ MI250 Versions not published
AMD Instinct™ MI210 Versions not published
AMD Instinct™ MI300X Versions not published
AMD Instinct™ MI325X Versions not published
AMD Instinct™ MI308X Versions not published
Show the 4 other branches
Product Affected versions Fixed in
AMD Instinct™ MI300A Versions not published
AMD Radeon™ PRO V520 Versions not published
AMD Radeon™ PRO V620 Versions not published
AMD Radeon™ PRO V710 Versions not published

Other CVEs of AMD Radeon™ RX 6000 Series Graphics Products

The 28 CVEs of AMD Radeon™ RX 6000 Series Graphics Products →
CVE-2026-43603 A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of… 6.9 Medium CVE-2021-46747 Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user… 7.1 High CVE-2024-36333 A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation… 7.0 High CVE-2023-31309 Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload… 6.8 Medium
Track this CVE