CVE-2025-48503: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™

Описание

Оригинално описание

A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

Засегнати продукти

• AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Renoir"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Picasso"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Phoenix"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics (formerly codenamed "Mendocino"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Dragon Range"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael"/"Raphael X3D"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Barcelo R"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Ryzen™ AI 300 Series Processors (formerly codenamed "Strix Point"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael"/"Raphael-X3D"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Ryzen™ 9000 Series Desktop Processors (formerly codenamed "Granite Ridge"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Cezanne"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Lucienne"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Barcelo"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Ryzen™ 4000 Series Desktop Processors (formerly codenamed "Renoir"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics (formerly codenamed "Cezanne"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Hawk Point"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Dali"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Dali"): amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Radeon™ RX 5000 Series Graphics Products: amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Radeon™ RX 6000 Series Graphics Products: amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Radeon™ RX 7000 Series Graphics Products: amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD Placeholder: amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Radeon™ PRO W5000 Series Graphics Products: amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Radeon™ PRO W6000 Series Graphics Products: amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Radeon™ PRO W7000 Series Graphics Products: amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe
• AMD AMD Radeon™ RX 9000 Series Graphics Products: amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe

Вид слабост

• CWE-427 Неконтролиран елемент от пътя за търсене

История

Други уязвимости в AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Renoir")

• 6.9CVE-2026-43603
• 7.1CVE-2021-46747
• 8.8CVE-2024-36323
• 7.0CVE-2024-36333
• 7.0CVE-2024-36334

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-48503
• https://nvd.nist.gov/vuln/detail/CVE-2025-48503
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6024.html