GPU & Accelerator Vulnerabilities

Latest in GPU & Accelerator Vulnerabilities

AMD Instinct Security Bulletins 2025-2026: Graphics Driver Vulnerabilities and MI300X Management Interface Exposure

A roundup of AMD Instinct security bulletins across 2025-2026, including MI300X SMC / Redfish API flaws.

AMD has published four significant Instinct and graphics security bulletins between February 2025 and May 2026. The most distinctive is AMD-SB-6016, which addresses vulnerabilities in the MI300X Satellite Management Controller — the network-accessible management interface for AMD's flagship data centre AI accelerator.

Stealthium Research TeamJun 24, 2026

2 MIN

Older in GPU & Accelerator Vulnerabilities

CVE-2023-31035: SMM-Level Code Execution in the NVIDIA DGX A100 SBIOS	Jun 24, 20262 MIN
CVE-2022-34668: NVFLARE Pickle Deserialization and the Federated Learning Attack Surface	Jun 24, 20262 MIN
Mid-2024 NVIDIA GPU Display Driver Bulletins: Out-of-Bounds Writes and Reads Across the Driver Stack	Jun 24, 20262 MIN
CVE-2022-34669 + CVE-2022-34671: High-Severity Windows GPU Driver Vulnerabilities That Set the Template	Jun 24, 20262 MIN
January 2025 NVIDIA GPU Display Driver Bulletin: Buffer Overflows, vGPU Memory Corruption, and a Unified Memory Leak	Jun 24, 20262 MIN
CVE-2024-0132 + CVE-2024-0133: The Container Escape That Changed How the Industry Thinks About GPU Security	Jun 24, 20262 MIN
CVE-2024-0087 and the 2024 Triton Bulletins: The Year the Inference Server Became a Target	Jun 24, 20262 MIN
CVE-2025-33225 / CVE-2025-33235: Predictable Log Files and Race Conditions in NVIDIA’s Training Resilience Layer	Jun 24, 20262 MIN
NVIDIA Megatron-LM: Code Injection Across the LLM Training Stack	Jun 24, 20262 MIN
September 2025 CUDA Toolkit Bulletin: Heap Overflow and Stack Overflow Return to nvdisasm and cuobjdump	Jun 24, 20262 MIN
NVIDIA CUDA Toolkit: Nine Vulnerabilities in cuobjdump and nvdisasm — The Developer Tool Attack Surface	Jun 24, 20262 MIN
October 2025 NVIDIA GPU Display Driver Bulletin: Use-After-Free, Race Conditions, and DLL Hijacking Across the Driver Stack	Jun 24, 20262 MIN
April 2025 NVIDIA GPU Display Driver Bulletin: Privilege Escalation and vGPU Resource Exploitation	Jun 24, 20262 MIN
CVE-2025-23316 / CVE-2025-23268 / CVE-2025-23331: Command Injection and DoS in the September 2025 Triton Bulletin	Jun 24, 20262 MIN
CVE-2025-23310 / CVE-2025-23311 / CVE-2025-23317: Stack and Heap Overflows in Triton's HTTP Layer	Jun 24, 20262 MIN
CVE-2025-23319 / CVE-2025-23320 / CVE-2025-23334: The Three-Step Chain That Handed Attackers Your AI Models	Jun 24, 20262 MIN
The February 2025 Container Toolkit Bulletin: Why NVIDIA Held the Details for Five Months	Jun 24, 20262 MIN
CVE-2024-0135 / CVE-2024-0136 / CVE-2024-0137: How Unprivileged Containers Bypassed the Kubernetes GPU Scheduler	Jun 24, 20262 MIN
CVE-2025-23359: The Patch That Wasn't Complete	Jun 24, 20262 MIN
CVE-2025-23267: Symlink Attack in the NVIDIA Container Toolkit's ldcache Hook	Jun 24, 20262 MIN
CVE-2025-23266 (NVIDIAScape): A Three-Line Container Escape in the NVIDIA Container Toolkit	Jun 24, 20263 MIN

Latest in GPU & Accelerator Vulnerabilities

AMD Instinct Security Bulletins 2025-2026: Graphics Driver Vulnerabilities and MI300X Management Interface Exposure

CVE-2024-21969 (Whispering Pixels): Uninitialized GPU Register Access in AMD Hardware

CVE-2024-36342: Heap Overflow in AMD GPU Driver Across the Instinct Data Centre Accelerator Line

CVE-2026-24186 + CVE-2026-24178: FOBS Deserialization and Authentication Bypass in NVFLARE -- 2026

January & May 2026 GPU Display Driver Bulletins

CVE-2026-24187: Use-After-Free in the NVIDIA Linux Display Driver -- May 2026

Older in GPU & Accelerator Vulnerabilities