Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2025-66664

Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause

Description

Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read, potentially resulting in SOC Driver memory contents exposure or an exception

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Radeon™ RX 6000 Series Graphics Products

Default version status: affected

  • AMD Software: Adrenalin Edition 25.12.1 (25.10.37.01)unaffected

AMD AMD Radeon™ RX 7000 Series Graphics Products

Default version status: affected

  • AMD Software: Adrenalin Edition 25.11.1 (25.20.29.01)unaffected

AMD AMD Radeon™ PRO W6000 Series Graphics Products

Default version status: affected

  • AMD Software: PRO Edition 25.Q4 (25.10.37.01)unaffected

AMD AMD Radeon™ PRO W7000 Series Graphics Products

Default version status: affected

  • AMD Software: PRO Edition 25.Q3.1 (25.10.32)unaffected

AMD AMD Instinct™ MI250

Default version status: affected

  • ROCm 7.0unaffected

AMD AMD Instinct™ MI210

Default version status: affected

  • ROCm 7.0unaffected

AMD AMD Instinct™ MI300X

Default version status: affected

  • ROCm 6.3.1unaffected

AMD AMD Instinct™ MI325X

Default version status: affected

  • ROCm 6.3.1unaffected

AMD AMD Instinct™ MI308X

Default version status: affected

  • ROCm 6.4.2unaffected

AMD AMD Instinct™ MI300A

Default version status: affected

  • BKC 26 (ROCm 7.0.1)unaffected

AMD AMD Radeon™ PRO V520

Default version status: affected

  • Contact your AMD Customer Engineering representativeunaffected

AMD AMD Radeon™ PRO V620

Default version status: affected

  • Contact your AMD Customer Engineering representativeunaffected

AMD AMD Radeon™ PRO V710

Default version status: affected

  • Contact your AMD Customer Engineering representativeunaffected

References