Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2025-48515 Details
Description
Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting in arbitrary code execution.
A vulnerability exists in the AMD Secure Processor (ASP) Boot Loader due to inadequate parameter sanitization. This flaw could enable an attacker with access to the SPI ROM upgrade to overwrite memory, potentially leading to arbitrary code execution.
Users are advised to update to the Platform Initialization (PI) version RenoirPI-FP6_1.0.0.Ec, which will be available on June 10, 2025.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Feb 10, 2026Exploitation: NoneAutomatable: NoTechnical Impact: Partial
CISA-ADP
Assessed Feb 10, 2026Exploitation: NoneAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html | [email protected] | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-190 | Integer Overflow or Wraparound | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| AMD Secure Processor | All versions |
CPE
Remediation
| |
| AMD Athlon 3000 | All versions |
CPE
Remediation
| |
| AMD Ryzen 3000 | All versions |
CPE
Remediation
| |
| AMD Ryzen 4000 | All versions |
CPE
Remediation
| |
| AMD Ryzen 5000 | All versions |
CPE
Remediation
| |
| AMD Ryzen 7000 | All versions |
CPE
Remediation
| |
| AMD Ryzen 7020 | All versions |
CPE
Remediation
| |
| AMD Ryzen 7030 | All versions |
CPE
Remediation
| |
| AMD Ryzen 7040 | All versions |
CPE
Remediation
| |
| AMD Ryzen 7045 | All versions |
CPE
Remediation
| |
| AMD Ryzen 8000 | All versions |
CPE
Remediation
| |
| AMD Ryzen 8040 | All versions |
CPE
Remediation
| |
| AMD Ryzen 9000 | All versions |
CPE
Remediation
| |
| AMD Ryzen 9000HX | All versions |
CPE
Remediation
| |
| AMD Ryzen AI 300 | All versions |
CPE
Remediation
| |
| AMD Ryzen AI Max 300 | All versions |
CPE
Remediation
| |
| AMD Ryzen Threadripper 7000 | All versions |
CPE
Remediation
| |
| AMD Ryzen Threadripper 9000 | All versions |
CPE
Remediation
| |
| AMD Ryzen Threadripper PRO 3000 WX | All versions |
CPE
Remediation
| |
| AMD Ryzen Threadripper PRO 5000 WX | All versions |
CPE
Remediation
| |
| AMD Ryzen Threadripper PRO 7000 WX | All versions |
CPE
Remediation
| |
| AMD Ryzen Threadripper PRO 9000 WX | All versions |
CPE
Remediation
| |
| AMD Ryzen Embedded 5000 | All versions |
CPE
Remediation
| |
| AMD Ryzen Embedded 7000 | All versions |
CPE
Remediation
| |
| AMD Ryzen Embedded 8000 | All versions |
CPE
Remediation
| |
| AMD Ryzen Embedded R1000 | All versions |
CPE
Remediation
| |
| AMD Ryzen Embedded R2000 | All versions |
CPE
Remediation
| |
| AMD Ryzen Embedded V1000 | All versions |
CPE
Remediation
| |
| AMD Ryzen Embedded V2000 | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Feb 10, 2026 | New CVE Received | [email protected] |