Sapphire Releases Security Firmware for Numerous Radeon RX 7000 Models

Graphics card firmware updates are among the things you would normally prefer not to touch without good reason. Sapphire is now providing exactly such a reason: the manufacturer has released new firmware updaters for a large part of the Radeon RX 7000 series, which are said to include a security improvement identified jointly with AMD. Eight GPU models are affected, from the Radeon RX 7600 to the RX 7900 XTX. However, Sapphire and AMD have so far remained largely silent the vulnerability itself.

For now, only one thing is certain: Sapphire explicitly recommends that owners of affected graphics cards keep their firmware up to date. The publicly available information does not reveal what specific security issue is being addressed, which firmware component is affected, or under what conditions the previously undescribed vulnerability could be exploited. Sapphire currently lists eight Radeon RX 7000 GPUs in its “Firmware & Security Updates” section. The manufacturer provides a separate firmware updater for each GPU family.

What stands out in particular is the breadth of the list. It ranges from Navi 33 cards in the RX 7600 family through Navi 32 to Navi 31 in the RX 7900 GRE, RX 7900 XT, and RX 7900 XTX. This is therefore not a fix for just one high-end model. Radeon RX 6000 cards based on RDNA 2 and the current RX 9000 series with RDNA 4 do not appear on Sapphire’s list. However, this does not automatically mean that the security vulnerability is limited to RDNA 3. Sapphire only identifies its own affected or supported products. No further technical explanation is available so far.

The manufacturer’s wording is notably restrained. Sapphire says the update addresses a “security improvement” identified jointly with AMD. The company recommends installing it to improve the graphics card’s protection, stability, and proper operation. What exactly is being changed remains unclear. Some reports refer to a new VBIOS. However, Sapphire generally describes the downloads on its central support page as firmware updaters. Without further technical documentation, I would therefore not automatically assume that the entire VBIOS is necessarily being replaced or that precisely the same firmware component is being updated internally across all models.

VideoCardz has also reported on eight affected RX 7000 GPUs and notes that Sapphire has not provided technical details the security issue. It also points out that neither the RX 6000 nor the RX 9000 appears on the current list. The distinction from a regular Adrenalin update is important. AMD’s Radeon driver is updated regularly and includes game optimizations and security measures in addition to bug fixes. The files now offered by Sapphire, by contrast, are explicitly firmware updaters for the graphics card itself.

This also means that an up-to-date Adrenalin driver does not automatically replace this firmware update. Nor can it be inferred from older AMD security advisories that they concern the same issue. For example, in February 2026, AMD documented several vulnerabilities affecting Radeon products and listed corresponding driver versions as mitigations. However, no direct connection between those advisories and Sapphire’s current firmware update has been established. That is exactly why the distinction should be clear: AMD drivers and Sapphire firmware are two different update layers.

Firmware flashing is inherently more sensitive than a regular driver installation. Sapphire therefore does not provide a universal RX 7000 updater, but separate downloads for the RX 7600, RX 7600 XT, RX 7650 GRE, RX 7700 XT, RX 7800 XT, RX 7900 GRE, RX 7900 XT, and RX 7900 XTX. Before installing, you should therefore check the exact graphics card model and use only the updater intended for it. Sapphire also provides a dedicated installation guide. Especially with cards that have multiple BIOS modes or manufacturer-specific variants, experimenting with firmware is hardly an ideal pastime.

The fact that the update is offered directly by Sapphire is crucial. Users of ASUS, ASRock, PowerColor, XFX, or other Radeon models should not apply Sapphire’s files to their cards. Even when the same AMD GPU is installed, board layout, power limits, voltage parameters, and firmware configurations vary by board partner and model. The most interesting question is precisely the one that cannot currently be answered: Is the security issue specific to Sapphire cards, or does it affect certain RDNA 3 GPUs in general or a firmware component provided by AMD?

The fact that Sapphire explicitly refers to a security improvement identified jointly with AMD at least indicates AMD’s involvement. However, this does not mean that all Radeon RX 7000 cards from other manufacturers need to be updated. Until an official AMD security bulletin or corresponding notices from other board partners are available, this distinction should be maintained. At present, the update is confirmed only for the cards named by Sapphire.

The precise threat level also remains unclear. There is currently no publicly explained attack method, no CVE entry cited by Sapphire, and no technical description that would allow the severity of the issue to be assessed reliably. Anyone who infers a critical RDNA 3 security vulnerability from the mere existence of the update is therefore going beyond the facts currently available.

I would hardly hesitate over a routine driver update. A graphics card firmware update is a different matter, since such updates are much less common and should ideally be documented in detail. This is precisely where Sapphire could be more transparent. On the other hand, the manufacturer is officially releasing the updaters and explicitly recommends installing them for security reasons. Owners of an affected Sapphire RX 7000 should therefore not simply ignore the update, but should carefully check the model name and instructions before using the updater intended for their card.

What happens is more interesting to me, however. If the issue does affect a component shared by RDNA 3 cards, other manufacturers may follow suit. Until there is reliable evidence of this, though, it remains a Sapphire-specific update involving AMD—not automatically a general recall covering every Radeon RX 7000.