VULNERABILITY INTELLIGENCE
CVE-2025-48507
EPSS probability0.20%
CISA KEVNot currently listed
Published2025-11-23
Last modified2026-10-18
Description
The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the ability to turn on and off subsystems within the SOC.
Weakness classification
- psirt@amd.com: CWE-1284