AMD Radeon driver vulnerability CVE-2026-48479 rated 6.9 severity
★ Add us as a preferred source on GoogleTL;DR
AMD says a vulnerability in certain integrated Radeon drivers can be triggered via WebGPU. Security researcher Michał Andryskowski demonstrated that crafted shaders cause application crashes.
AMD published a security advisory on November 10, 2026, detailing a vulnerability in certain Radeon graphics drivers. Tracked as CVE-2026-48479, the issue stems from an invalid state in DirectX and Vulkan user-mode drivers, resulting in an out-of-bounds write.
Security researcher Michał Andryskowski demonstrated that crafted shader programs can trigger the flaw via a web browser's WebGPU interface. AMD rates the vulnerability 6.9 on the CVSS 4.0 scale.
The manufacturer confirms that the bug causes affected processes to crash, classifying it as a denial-of-service vector. AMD states it has found no evidence of data manipulation, code execution, or active exploitation.
Affected consumer products include specific Ryzen 4000 and Ryzen 5000 processors with integrated graphics, mobile Ryzen 7030 parts, and mobile Athlon 3000 models. Dedicated Radeon RX desktop models are not listed. Fixes for Ryzen Embedded families are scheduled for December 2026.
