CVE-2025-0010

State
Published
Severity
6.1 Medium
Published
Sep 6, 2025
Updated
Sep 8, 2025
Reserved
Oct 10, 2024

Read the record on cve.org

Description

An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting in loss of confidentiality, integrity, or availability.

Scores

CVSSScoreVectorSource
3.16.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:HAMD

Weaknesses

Affected Products

ProductVersions
AMD Radeon™ RX 5000 Series Graphics ProductsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Radeon™ RX 6000 Series Graphics ProductsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Radeon™ RX 7000 Series Graphics ProductsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Radeon™ RX Vega Series Graphics CardsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Radeon™ PRO W5000 Series Graphics ProductsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Radeon™ PRO W6000 Series Graphics ProductsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Radeon™ PRO W7000 Series Graphics ProductsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Radeon™ VIIAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Instinct™ MI200AMD
  • ROCm 6.3Not affected
AMD Instinct™ MI210AMD
  • ROCm 6.3Not affected
AMD Instinct™ MI250AMD
  • ROCm 6.3Not affected
AMD Instinct™ MI300AAMD
  • ROCm 6.3Not affected
AMD Instinct™ MI300XAMD
  • ROCm 6.3Not affected
AMD Radeon™ PRO V520 Graphics ProductsAMD
  • Contact your AMD Customer Engineering representativeNot affected
AMD Radeon™ PRO V620 Graphics ProductsAMD
  • Contact your AMD Customer Engineering representativeNot affected
AMD Radeon™ PRO V710 Graphics ProductsAMD
  • Contact your AMD Customer Engineering representativeNot affected
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Ryzen™ 7035 Series Processors with Radeon™ GraphicsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ GraphicsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Ryzen™ 7020 Series Processors with Radeon™ GraphicsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ GraphicsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Ryzen™ 7000 Series Desktop ProcessorsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ GraphicsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Ryzen™ AI 300 Series ProcessorsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ GraphicsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Ryzen™ 7000 Series Desktop ProcessorsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Ryzen™ 8000 Series Desktop ProcessorsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Ryzen™ 9000 Series Desktop ProcessorsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Ryzen™ 4000 Series Desktop ProcessorsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ GraphicsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Ryzen™ 5000 Series Desktop ProcessorsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ GraphicsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD
  • Radeon Software for Linux 24.30.2Not affected
AMD Ryzen™ 6000 Series Processors with Radeon™ GraphicsAMD
  • Radeon Software for Linux 24.30.2Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.