CVE-2025-48516

Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the unprotected PMIC interface to create a permanent denial of service condition or affect the integrity of the memory module.

Score
CVSS 4.0 6.9 Medium
Status
Awaiting Analysis - psirt@amd.com
Published
2026-05-15
Last modified
2026-05-15
Weaknesses
CWE-276

Affected products

References