CVE-2025-48511

Medium · 5.5

CVSS

5.5

EPSS

0.1%

Published

Nov 24, 2025

CISA due date

—

The record

Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service.

Affected packages

Ecosystem	Package	Introduced	Fixed