AMD Device Metrics Exporter Unrestricted IP Binding RCE
CVE-2026-0481 Published on May 15, 2026
Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in loss of availability
Weakness Type
Binding to an Unrestricted IP Address
The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely.
Affected Versions
AMD Instinct™ MI210:- Version DME v1.4.1.2 and v1.4.0.1 is unaffected.
- Version DME v1.4.1.2 and v1.4.0.1 is unaffected.
- Version DME v1.4.1.2 and v1.4.0.1 is unaffected.
- Version DME v1.4.1.2 and v1.4.0.1 is unaffected.
- Version DME v1.4.1.2 and v1.4.0.1 is unaffected.
- Version DME v1.4.1.2 and v1.4.0.1 is unaffected.
- Version DME v1.4.1.2 and v1.4.0.1 is unaffected.
- Version DME v1.4.1.2 and v1.4.0.1 is unaffected.
- Version DME v1.4.1.2 and v1.4.0.1 is unaffected.