CVE-2025-48515: medium-severity vulnerability in AMD Ryzen™ 4000 Series Desktop Processors
Published
Follow this CVE+ Monitor AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics+ Monitor AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.4epss 0.1%
Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting in arbitrary code execution.
CVSS:4.0/AV:P/AC:H/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
AMD · AMD Ryzen™ 4000 Series Desktop ProcessorsAMD · AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsAMD · AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ GraphicsAMD · AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsAMD · AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ GraphicsAMD · AMD Ryzen™ Embedded V2000 Series ProcessorsRelated CVEs — AMD Ryzen™ 4000 Series Desktop Processors
In the same product, most dangerous first.