← Back

CVE-2025-48511

nvd nist
Published: Nov 24, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: psirt@amd.com (Secondary)

Description

Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service.

Affected (3)

Products: Amd: Uprof
Amd
1 product
Uprof
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Amd
Uprof
Before 5.0.1223
Uprof
Before 5.0.1479
Uprof
Before 5.0.1174

Related CWEs

CWE-1285
Improper Validation of Specified Index, Position, or Offset in Input
The product receives input that is expected to specify an index, position, or offset into an indexable resource such as a buffer or file, but it does not validate or incorrectly validates that the specified index/position/offset has the required properties.

References (1)

Source: psirt@amd.com
MitigationVendor Advisory

Timeline

No history available yet.