Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution.
Untrusted Pointer Dereference The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.