Out-of-bounds Read in AMD Instinct™ Mi210
CVE-2025-66664
Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read, potentially resulting in SOC Driver memory contents exposure or an exception
Vulnerability class: Buffer Overflow
Published · last modified .
EPSS exploit prediction
EPSS: 0.001 (1.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 1st percentile — 1.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: 0.000
Affected products
- AMD Instinct™ Mi210 — versions ROCm 7.0
- AMD Instinct™ Mi250 — versions ROCm 7.0
- AMD Instinct™ Mi300a — versions BKC 26 (ROCm 7.0.1)
- AMD Instinct™ Mi300x — versions ROCm 6.3.1
- AMD Instinct™ Mi308x — versions ROCm 6.4.2
- AMD Instinct™ Mi325x — versions ROCm 6.3.1
- AMD Radeon™ Pro V520 — versions Contact your AMD Customer Engineering representative
- AMD Radeon™ Pro V620 — versions Contact your AMD Customer Engineering representative
- AMD Radeon™ Pro V710 — versions Contact your AMD Customer Engineering representative
- AMD Radeon™ Pro W6000 Series Graphics Products — versions AMD Software: PRO Edition 25.Q4 (25.10.37.01)