CVE-2025-48521

Description

Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condition, potentially resulting in a loss of platform integrity or crash.

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3047.html
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4015.html