CVE-2026-0481CWE-1327

Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU…

Critical · published May 15, 2026

CVSS v4.0
9.2
EPSS
0%
Percentile
22.4
In the wild
Unconfirmed
What it is

Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in loss of availability

The record
Technical detail
CVSS v4.0
9.2 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
EPSS
0.00308 · 22.4th percentile
Weakness
CWE-1327 · Binding to an Unrestricted IP Address
Published
2026-05-15T03:04Z
EPSS history
Timeline
  • 15 MAY 03:04Z
    Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU…
    cvelistv5