CVE-2025-48502
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service.
Risk Assessment
The risk includes the possibility of system crashes or denial of service by a local attacker, potentially disrupting organizational operations.
Recommendation
Update AMD uprof to a patched version and restrict access to the tool to trusted users only.
Other vulnerabilities in AMD uprof
See all- CVE-2026-28237Medium
Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability.
- CVE-2026-0466Medium
Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of service.
- CVE-2025-48511Medium
Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service.
- CVE-2025-48510High
An improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability.
- CVE-2025-29933Medium
Improper input validation in AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of service.
Original NVD description (English source)
Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS