What’s Vulnerable › Vulnerabilities

CVE-2025-48502

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-21 · updated 2026-10-08
• Weakness: CWE-1285

Description

Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service.

Affected products

• AMD Uprof: before 5.0.1174; before 5.0.1223; before 5.0.1479 — fixed in 5.0.1174, 5.0.1223, 5.0.1479

How to fix

Upgrade to a fixed version: AMD Uprof 5.0.1174, 5.0.1223, 5.0.1479. Check the vendor advisory for mitigations.

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-9019.html

Get alerted when CVE-2025-48502 or the next vulnerability affects your stack