PT-2026-41244 · Amd · Platform Management Framework

CVE-2025-0028 · Published 2026-05-15 · Updated 2026-05-15

Positive Technologies (AI Summary)

CVSS v4.0

8.3

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:H/SI:N/SA:H

Name of the Vulnerable Software and Affected Versions AMD Platform Management Framework (affected versions not specified)

Description An unchecked return value within the AMD Platform Management Framework (PMF) allows an attacker to read or modify an arbitrary address. This could lead to a loss of confidentiality, integrity, or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unchecked Return Value

Weakness Enumeration

CWE-252

Related Identifiers

CVE-2025-0028

Affected Products

Platform Management Framework

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-0028 · Security Note
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-4015.html · Note
• https://twitter.com/VulmonFeeds/status/2055195734329237554 · Twitter Post
• https://t.me/CVEtracker/53859 · Telegram Post