VULNERABILITY INTELLIGENCE
CVE-2025-48520
EPSS probability0.10%
CISA KEVNot currently listed
Published2026-05-15
Last modified2026-06-17
Description
An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read Out-of-Bounds potentially resulting in information disclosure or a crash
Weakness classification
- psirt@amd.com: CWE-125