CVE-2025-66664

No fix known EPSS <1%CVSS 4.6

Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read, potentially resulting in SOC Driver memory contents exposure or an exception

Published 2026-05-15 · CVE record · OSV

Products: AMD Radeon™ RX 6000 Series Graphics Products, AMD Radeon™ RX 7000 Series Graphics Products, AMD Radeon™ PRO W6000 Series Graphics Products, AMD Radeon™ PRO W7000 Series Graphics Products, AMD Instinct™ MI250, AMD Instinct™ MI210, AMD Instinct™ MI300X, AMD Instinct™ MI325X, AMD Instinct™ MI308X, AMD Instinct™ MI300A, AMD Radeon™ PRO V520, AMD Radeon™ PRO V620, AMD Radeon™ PRO V710