Description (CNA)
Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AMD / AMD Instinct™ MI210 | unaffected ROCm 7.14 |
| AMD / AMD Instinct™ MI250 | unaffected ROCm 7.14 |
| AMD / AMD Instinct™ MI300A | unaffected ROCm 7.14 |
| AMD / AMD Instinct™ MI300X | unaffected ROCm 7.14 |
| AMD / AMD Instinct™ MI325X | unaffected ROCm 7.14 |
| AMD / AMD Instinct™ MI350X | unaffected ROCm 7.14 |
| AMD / AMD Instinct™ MI355X | unaffected ROCm 7.14 |
| AMD / AMD Instinct™ MI308X | unaffected ROCm 7.14 |
| AMD / AMD Instinct™ MI250X | unaffected ROCm 7.14 |
CWE
CWE-822
References
ADP enrichment
No English description supplied.
No references supplied.