CVE-2025-48511 Details
Description
Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service.
A vulnerability exists in AMD uProf due to improper input validation, which can enable a local attacker to write to an arbitrary physical address. This flaw has the potential to cause a system crash or lead to a denial-of-service condition.
Users can upgrade to AMD uProf version 5.0 or higher to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Nov 24, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-9019.html | [email protected] | MitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-1285 | Improper Validation of Specified Index, Position, or Offset in Input | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| amd uprof | < 5.0.1174 < 5.0.1223 < 5.0.1479 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Nov 26, 2025 | Initial Analysis | [email protected] |
| Nov 24, 2025 | New CVE Received | [email protected] |