Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2026-43598

Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-contr

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Instinct™ MI210

Default version status: affected

  • ROCm 7.14unaffected

AMD AMD Instinct™ MI250

Default version status: affected

  • ROCm 7.14unaffected

AMD AMD Instinct™ MI300A

Default version status: affected

  • ROCm 7.14unaffected

AMD AMD Instinct™ MI300X

Default version status: affected

  • ROCm 7.14unaffected

AMD AMD Instinct™ MI325X

Default version status: affected

  • ROCm 7.14unaffected

AMD AMD Instinct™ MI350X

Default version status: affected

  • ROCm 7.14unaffected

AMD AMD Instinct™ MI355X

Default version status: affected

  • ROCm 7.14unaffected

AMD AMD Instinct™ MI308X

Default version status: affected

  • ROCm 7.14unaffected

AMD AMD Instinct™ MI250X

Default version status: affected

  • ROCm 7.14unaffected

References