CVE-2025-48510

Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability.

Score

CVSS 3.1 7.1 High

Status

Analyzed - psirt@amd.com

Published

2025-11-24

Last modified

2026-10-08

Weaknesses

CWE-394

Affected products

• Amd Prof (Amd)
• Uprof (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-9019.html