BaseFortify

Publication date: 2025-11-24

Last updated on: 2025-11-26

Assigner: Advanced Micro Devices Inc.

Description

Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-24

Last Modified

2025-11-26

Generated

2026-07-06

AI Q&A

2025-11-24

EPSS Evaluated

2026-07-05

NVD

CVE-2025-48510

EUVD

EUVD-2025-198996

Affected Vendors & Products

Vendor	Product	Version / Range
amd	uprof	to 5.0.1174 (exc)
amd	uprof	to 5.0.1223 (exc)
amd	uprof	to 5.0.1479 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-394	The product does not properly check when a function or operation returns a value that is legitimate for the function, but is not expected by the product.

Attack-Flow Graph

Executive Summary

This vulnerability is caused by an improper return value within AMD uProf, which allows a local attacker to bypass Kernel Shadow Stack Return (KSLR). This bypass can lead to potential loss of confidentiality or availability on the affected system.

Impact Analysis

The vulnerability can impact you by allowing a local attacker to bypass security mechanisms (KSLR), which may result in loss of confidentiality of sensitive information or loss of availability of system resources.

Hi! I’m here to help you understand CVE-2025-48510. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70