CVE-2025-48510
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
An improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability.
Risk Assessment
A local attacker can bypass the KSLR protection and compromise the confidentiality or availability of data on the affected system. The risk applies to environments where AMD uProf is used.
Recommendation
Update AMD uProf to a version containing the fix for the improper return value and restrict local access to systems where the tool is installed.
Other vulnerabilities in AMD uProf
See all- CVE-2026-28237Medium
Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability.
- CVE-2026-0466Medium
Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of service.
- CVE-2025-48511Medium
Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service.
- CVE-2025-29933Medium
Improper input validation in AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of service.
- CVE-2025-48502Medium
Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service.
Original NVD description (English source)
Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS