PT-2026-41252 · Amd · Platform Management Framework

CVE-2025-48513 · Published 2026-05-15 · Updated 2026-05-15

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions AMD Platform Management Framework (affected versions not specified)

Description The use of an uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read uninitialized kernel memory, which may lead to a loss of confidentiality or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

CVE-2025-48513

Affected Products

Platform Management Framework

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-48513 · Security Note
• https://twitter.com/VulmonFeeds/status/2055170137410470232 · Twitter Post
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-4015.html · Note
• https://t.me/CVEtracker/53867 · Telegram Post