CVE-2025-48502

Medium · 5.5

CVSS

5.5

EPSS

0.1%

Published

Nov 21, 2025

CISA due date

—

The record

Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service.

Affected packages

Ecosystem	Package	Introduced	Fixed