CVE-2025-66664

Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read, potentially resulting in SOC Driver memory contents exposure or an exception

Score

CVSS 4.0 4.6 Medium

Status

Awaiting Analysis - psirt@amd.com

Published

2026-05-15

Last modified

2026-05-15

Weaknesses

CWE-125

Affected products

• Amd Instinct Mi210 (Amd)
• Amd Instinct Mi250 (Amd)
• Amd Instinct Mi300a (Amd)
• Amd Instinct Mi300x (Amd)
• Amd Instinct Mi308x (Amd)
• Amd Instinct Mi325x (Amd)
• Amd Radeon Pro V520 (Amd)
• Amd Radeon Pro V620 (Amd)
• Amd Radeon Pro V710 (Amd)
• Amd Radeon Pro W6000 Series Graphics Products (Amd)
• Amd Radeon Pro W7000 Series Graphics Products (Amd)
• Amd Radeon Rx 6000 Series Graphics Products (Amd)
• Amd Radeon Rx 7000 Series Graphics Products (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html