CVE-2026-43598: Input Validation
Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution.
Affected Software
Event History
Frequently Asked Questions
Which environments are most exposed?
RCCL deployments in which an attacker could operate as a compromised peer rank or has network-adjacent access should be prioritized. The issue is network-reachable and does not require user interaction.
What level of access does an attacker need?
The CVSS vector indicates low privileges are required. The described attack paths involve a compromised peer rank or a network-adjacent attacker.
What is the potential impact if exploitation succeeds?
Successful exploitation could dereference an attacker-controlled pointer and may result in remote code execution. Confidentiality, integrity, and availability impacts are each rated High in the supplied CVSS vector.