CVE-2025-48515 — AMD / AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Description (CNA)

Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting in arbitrary code execution.

Affected (CNA)

Vendor / product	Versions
AMD / AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics	unaffected RenoirPI-FP6 1.0.0.Ed
AMD / AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics	unaffected CezannePI-FP6_1.0.1.1c
AMD / AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics	unaffected CezannePI-FP6_1.0.1.1c
AMD / AMD Ryzen™ 4000 Series Desktop Processors	unaffected RenoirPI-FP6_1.0.0.Ec
AMD / AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics	unaffected ComboAM4v2PI_1.2.0.11
AMD / AMD Ryzen™ Embedded V2000 Series Processors	unaffected EmbeddedPI-FP6_1.0.0.D

CWE

CWE-190

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.