CVE-2026-43598

Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution.

Score

CVSS 4.0 7.7 High

Status

Awaiting Analysis - psirt@amd.com

Published

2026-10-06

Last modified

2026-10-07

Weaknesses

CWE-822

Affected products

• Amd Instinct Mi210 (Amd)
• Amd Instinct Mi250 (Amd)
• Amd Instinct Mi250x (Amd)
• Amd Instinct Mi300a (Amd)
• Amd Instinct Mi300x (Amd)
• Amd Instinct Mi308x (Amd)
• Amd Instinct Mi325x (Amd)
• Amd Instinct Mi350x (Amd)
• Amd Instinct Mi355x (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6033.html