CVE-2025-8087
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution.
Risk Assessment
An attacker with local access can gain elevated privileges and execute malicious code, potentially leading to full system compromise. The risk is especially relevant in environments where users can install and uninstall software.
Recommendation
Update AMD Power Design Manager to the latest version containing the fix. Also restrict user permissions to install and uninstall software.
Original NVD description (English source)
A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution.