CVE-2025-48520

An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read Out-of-Bounds potentially resulting in information disclosure or a crash

Score

CVSS 4.0 6.9 Medium

Status

Awaiting Analysis - psirt@amd.com

Published

2026-05-15

Last modified

2026-05-15

Weaknesses

CWE-125

Affected products

• Amd Ryzen 6000 Series Processors With Radeon Graphics Formerly Codenamed Rembrandt (Amd)
• Amd Ryzen 7035 Series Processors With Radeon Graphics Formerly Codenamed Rembrandt R (Amd)
• Amd Ryzen 7040 Series Mobile Processors With Radeon Graphics Formerly Codenamed Phoenix (Amd)
• Amd Ryzen 8040 Series Mobile Processors With Radeon Graphics Formerly Codenamed Hawk Point (Amd)
• Amd Ryzen Embedded 8000 Series Processors (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4015.html