CVE-2025-48511
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service.
Risk Assessment
The risk includes the possibility of system crashes or denial of service by a local attacker, potentially disrupting organizational operations.
Recommendation
Update AMD uprof to a patched version and restrict access to the tool to trusted users only.
Other vulnerabilities in AMD uprof
See all- CVE-2026-28237Medium
Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability.
- CVE-2026-0466Medium
Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of service.
- CVE-2025-48510High
An improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability.
- CVE-2025-29933Medium
Improper input validation in AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of service.
- CVE-2025-48502Medium
Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service.
Original NVD description (English source)
Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS