PT-2025-47796 · Amd · Amd Uprof

Published 2025-11-21 · Updated 2025-11-26 · CVE-2025-48502

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions AMD uprof (affected versions not specified)

Description Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in a crash or denial of service. The issue involves insufficient checks on input, which could lead to unauthorized modification of Model Specific Registers (MSRs).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-1285

Related Identifiers

CVE-2025-48502

Affected Products

Amd Uprof

References · 5

• https://osv.dev/vulnerability/CVE-2025-48502 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-48502 · Security Note
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-9019.html · Vendor Advisory
• https://t.me/cveNotify/144125 · Telegram Post
• https://t.me/CVEtracker/37965 · Telegram Post