AMD RCCL Improper Input Validation: Possible RCE via Pointer Deref
CVE-2026-43598 Published on October 6, 2026

Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution.

NVD

Vulnerability Analysis

CVE-2026-43598 is exploitable with network access, and requires small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
HIGH
Privileges Required:
LOW
User Interaction:
NONE

Weakness Type

Untrusted Pointer Dereference

The program obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.


Affected Versions

AMD Instinct™ MI210: AMD Instinct™ MI250: AMD Instinct™ MI300A: AMD Instinct™ MI300X: AMD Instinct™ MI325X: AMD Instinct™ MI350X: AMD Instinct™ MI355X: AMD Instinct™ MI308X: AMD Instinct™ MI250X: