CVE-2025-48515_CVE-2025-48515

5.4 / 10

MEDIUM

CVSS:4.0/AV:P/AC:H/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting in arbitrary code execution.

Basic Information

ID CVE-2025-48515

Source AMD

Published Feb 10, 2026 at 19:49

Modified Feb 10, 2026 at 20:44

Affected Product

Vendor AMD

Product AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Version RenoirPI-FP6 1.0.0.Ed

CWE Classification

CWE-190

References

www.amd.com /en/resources/product-security/bulletin/AMD-SB-4013.html

{
    "lastseen": "",
    "description": "Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting in arbitrary code execution.",
    "published": "2026-02-10T19:49:14.504Z",
    "modified": "2026-02-10T20:44:44.557Z",
    "type": "cve",
    "title": "CVE-2025-48515",
    "source": "AMD",
    "references": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html",
    "id": "CVE-2025-48515",
    "bulletinFamily": "",
    "cwe": [
        "CWE-190"
    ],
    "cvelist": null,
    "sourceData": "",
    "sourceHref": "",
    "cvss": {
        "score": 5.4,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:P/AC:H/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "AMD Ryzen\u2122 4000 Series Mobile Processors with Radeon\u2122 Graphics",
    "version": "RenoirPI-FP6 1.0.0.Ed",
    "vendor": "AMD",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}