VULNERABILITY INTELLIGENCE

CVE-2025-52540

EPSS probability0.10%
CISA KEVNot currently listed
Published2026-05-15
Last modified2026-06-17

Description

An improper input validation vulnerability within the AMD Platform Management Framework (PMF) Driver can allow a local attacker to write Out-of-Bounds, potentially resulting in privilege escalation.

Weakness classification

  • psirt@amd.com: CWE-787

Primary references