PT-2026-41253 · Amd · Agesa Bootloader Firmware

Published 2026-05-15 · Updated 2026-05-28 · CVE-2025-48516

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions AGESA Bootloader Firmware (affected versions not specified)

Description An insecure default configuration state of the DDR5 memory module within the AGESA Bootloader Firmware allows a local user to abuse the unprotected PMIC (Power Management Integrated Circuit) interface. This could lead to a permanent denial of service condition or compromise the integrity of the memory module.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2025-48516

Affected Products

Agesa Bootloader Firmware

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-48516 · Security Note
• https://twitter.com/vuldb/status/2059832425723920658 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2055167576854958505 · Twitter Post
• https://t.me/CVEtracker/53868 · Telegram Post
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html · Note