CVE-2025-48521: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™

Описание

Оригинално описание

Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condition, potentially resulting in a loss of platform integrity or crash.

Засегнати продукти

• AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Renoir"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Picasso"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Phoenix"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics (formerly codenamed "Mendocino"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Dragon Range"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael"/"Raphael X3D"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 3000 Series Desktop Processors (formerly codenamed "Matisse"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ Threadripper™ PRO 3000WX Processors (formerly codenamed "Castle Peak"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Barcelo R"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ Threadripper™ PRO 3000WX Processors (formerly codenamed "Castle Peak"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ Threadripper™ 3000 Processors (formerly codenamed "Castle Peak"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ AI 300 Series Processors (formerly codenamed "Strix Point"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics (formerly codenamed "Picasso"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors (formerly codenamed "Chagall"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ Threadripper™ 7000 Processors (formerly codenamed "Storm Peak"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors (formerly codenamed "Storm Peak"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael"/"Raphael-X3D"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 9000 Series Desktop Processors (formerly codenamed "Granite Ridge"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Cezanne"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Lucienne"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Barcelo"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 4000 Series Desktop Processors (formerly codenamed "Renoir"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 5000 Series Desktop Processors (formerly codenamed "Vermeer"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics (formerly codenamed "Cezanne"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 3000 Series Desktop Processors (formerly codenamed "Matisse"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 5000 Series Desktop Processors (formerly codenamed "Vermeer"/"Vermeer-X3D"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Hawk Point"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Dali"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Dali"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Pollock"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt"): AMD Ryzen™ Chipset Driver 7.02.13.148
• AMD AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso"): 25Q3 AMD Emb [R1000 V1000] Win® Catalyst™ WHQL certified driver (71251)
• AMD AMD Ryzen™ Embedded R1000 Series Processors: 25Q3 AMD Emb [R1000 V1000] Win® Catalyst™ WHQL certified driver (71251)
• AMD AMD Ryzen™ Embedded R2000 Series Processors: Q2- 2025 AMD Embedded R2000, V2000 Windows® Catalyst™ WHQL certified driver (68914)
• AMD AMD Ryzen™ Embedded V2000 Series Processors: Q2- 2025 AMD Embedded R2000, V2000 Windows® Catalyst™ WHQL certified driver (68914)
• AMD AMD EPYC™ Embedded 4004 Series Processors: AM5 Windows Chipset Drivers with Digital Signature Fix (64284)
• AMD AMD EPYC™ Embedded 8004 Series Processors: Q4 - 2025 AMD Embedded Windows® Chipset drivers (71816)
• AMD AMD EPYC™ Embedded 4005 Series Processors: AM5 Windows Chipset Drivers with Digital Signature Fix (64284)
• AMD AMD Ryzen™ Embedded 8000 Series Processors: Q2 - 2025 AMD Embedded Ryzen[7000 8000 9000] Windows® Catalyst™ driver [25.6.1] (68926)
• AMD AMD Ryzen™ Embedded 7000 Series Processors: Q2 - 2025 AMD Embedded Ryzen[7000 8000 9000] Windows® Catalyst™ driver [25.6.1] (68926)
• AMD AMD EPYC™ Embedded 9000 Series Processors: Q4 - 2025 AMD Embedded Windows® Chipset drivers (71816)
• AMD AMD Ryzen™ Embedded 9000 Series Processors: Q2 - 2025 AMD Embedded Ryzen[7000 8000 9000] Windows® Catalyst™ driver [25.6.1] (68926)
• AMD AMD EPYC™ 4004 Series Processors: AMD Chipset Driver 7.02.13.148
• AMD AMD EPYC™ 4005 Series Processors: AMD Chipset Driver 7.02.13.148

Вид слабост

• CWE-416 Използване на памет след освобождаване (Use-After-Free)

История

Други уязвимости в AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Renoir")

• 6.9CVE-2026-43603
• 4.0CVE-2025-54509
• 7.1CVE-2021-46747
• 4.6CVE-2024-36343
• 7.3CVE-2025-54518

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-48521
• https://nvd.nist.gov/vuln/detail/CVE-2025-48521
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4015.html
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3047.html