CVE-2025-48502: Input Validation
Published Nov 21, 2025
·Updated
Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service.
Affected Software
4 affected components
AMD uProf
AMD Uprof Windows<5.0.1174
AMD Uprof Freebsd<5.0.1223
AMD Uprof Linux<5.0.1479
Event History
Nov 21, 2025
CVE Published
via MITRE·07:07 PM
Data Sourced
via MITRE·07:07 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-48502?
CVE-2025-48502 is considered a high severity vulnerability due to its potential to allow local attackers to overwrite critical MSR registers.
2
How do I fix CVE-2025-48502?
To address CVE-2025-48502, users should apply the latest patches provided by AMD for the uProf tool.
3
Who is affected by CVE-2025-48502?
CVE-2025-48502 primarily affects users of AMD uProf and its associated software tools.
4
What impact can CVE-2025-48502 have on my system?
Exploitation of CVE-2025-48502 can lead to system crashes or denial of service.
5
Is CVE-2025-48502 exploitable remotely?
CVE-2025-48502 is not remotely exploitable as it requires local access to the system.