CVE-2025-48518

State
Published
Severity
6.9 Medium
Published
Feb 11, 2026
Updated
Feb 11, 2026
Reserved
May 22, 2025

Read the record on cve.org

Description

Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integrity or denial of service.

Scores

CVSSScoreVectorSource
4.06.9 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:NAMD

Weaknesses

Affected Products

ProductVersions
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ GraphicsAMD
  • AMD Software: Adrenalin Edition 25.6.1 (25.10.x.y), AMD Software: PRO Edition 25.Q2 (25.10.10)Not affected
AMD Ryzen™ AI 300 Series ProcessorsAMD
  • AMD Software: Adrenalin Edition 25.6.1 (25.10.x.y), AMD Software: PRO Edition 25.Q2 (25.10.10)Not affected
AMD Ryzen™ 8000 Series Desktop ProcessorsAMD
  • AMD Software: Adrenalin Edition 25.6.1 (25.10.x.y), AMD Software: PRO Edition 25.Q2 (25.10.10)Not affected
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ GraphicsAMD
  • AMD Software: Adrenalin Edition 25.6.1 (25.10.x.y), AMD Software: PRO Edition 25.Q2 (25.10.10)Not affected
AMD Ryzen™ Al Max+AMD
  • AMD Software: Adrenalin Edition 25.6.1 (25.10.x.y), AMD Software: PRO Edition 25.Q2 (25.10.10)Not affected
AMD Ryzen™ Embedded 8000 Series ProcessorsAMD
  • AMD Software: Adrenalin Edition 25.6.1 , AMD Software: PRO Edition 25.Q2 (25.10.10)Not affected
AMD Radeon™ RX 7000 Series Graphics ProductsAMD
  • AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10)Not affected
AMD Radeon™ PRO W7000 Series Graphics ProductsAMD
  • AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10)Not affected
AMD Radeon™ RX 9000 Series Graphics ProductsAMD
  • AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10)Not affected
AMD Radeon™ PRO V710AMD
  • Contact your AMD Customer Engineering representativeNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.