CVE-2025-48515

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

MEDIUM 5.4

En bref

Source: NVD
EPSS: EPSS 0.15 % · centile 4 (2026-10-28)
État: PUBLISHED
Publiée: 2026-02-10 19:49 UTC
Mise à jour: 2026-02-10 20:44 UTC
Attribuée par: AMD
Statut NVD: Deferred

Description

Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting in arbitrary code execution.

Faiblesses (CWE)

CWE-190 — Débordement d'entier

Références

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html

Scores

Version	Score	Vecteur	Évalué par
CVSS 4.0	MEDIUM 5.4	CVSS:4.0/AV:P/AC:H/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	AMD
CVSS 4.0	MEDIUM 5.4	CVSS:4.0/AV:P/AC:H/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X	NVD · psirt@amd.com (Secondary)

Références européennes

ENISA EUVD · EUVD-2025-207142
GCVE · GCVE-0-2025-48515

Produits affectés

Produit	Versions
AMD · AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics	unaffected RenoirPI-FP6 1.0.0.Ed
AMD · AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics	unaffected CezannePI-FP6_1.0.1.1c
AMD · AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics	unaffected CezannePI-FP6_1.0.1.1c
AMD · AMD Ryzen™ 4000 Series Desktop Processors	unaffected RenoirPI-FP6_1.0.0.Ec
AMD · AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics	unaffected ComboAM4v2PI_1.2.0.11
AMD · AMD Ryzen™ Embedded V2000 Series Processors	unaffected EmbeddedPI-FP6_1.0.0.D

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD