Integer overflow in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
Priority LOW 25CWE-190Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- High
- User interaction
- Passive
- Attack complexity
- High
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-190 and the CVSS impact.
Summary
Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting in arbitrary code execution.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00149 4th percentileScored 2026-11-07
Fix Fixed AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (AMD): RenoirPI-FP6 1.0.0.EdAMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics (AMD): CezannePI-FP6_1.0.1.1c+4 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| AMD | AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics | — | RenoirPI-FP6 1.0.0.Ed | Patch available | CNA |
| AMD | AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics | — | CezannePI-FP6_1.0.1.1c | Patch available | CNA |
| AMD | AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics | — | CezannePI-FP6_1.0.1.1c | Patch available | CNA |
| AMD | AMD Ryzen™ 4000 Series Desktop Processors | — | RenoirPI-FP6_1.0.0.Ec | Patch available | CNA |
| AMD | AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics | — | ComboAM4v2PI_1.2.0.11 | Patch available | CNA |
| AMD | AMD Ryzen™ Embedded V2000 Series Processors | — | EmbeddedPI-FP6_1.0.0.D | Patch available | CNA |
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics VendorAMD Affected — Fixed in RenoirPI-FP6 1.0.0.Ed Patch available CNA
- AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics VendorAMD Affected — Fixed in CezannePI-FP6_1.0.1.1c Patch available CNA
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics VendorAMD Affected — Fixed in CezannePI-FP6_1.0.1.1c Patch available CNA
- AMD Ryzen™ 4000 Series Desktop Processors VendorAMD Affected — Fixed in RenoirPI-FP6_1.0.0.Ec Patch available CNA
- AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics VendorAMD Affected — Fixed in ComboAM4v2PI_1.2.0.11 Patch available CNA
- AMD Ryzen™ Embedded V2000 Series Processors VendorAMD Affected — Fixed in EmbeddedPI-FP6_1.0.0.D Patch available CNA
Remediation
- Fix · CNA AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (AMD) Fixed in RenoirPI-FP6 1.0.0.Ed
- Fix · CNA AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics (AMD) Fixed in CezannePI-FP6_1.0.1.1c
- Fix · CNA AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics (AMD) Fixed in CezannePI-FP6_1.0.1.1c
- Fix · CNA AMD Ryzen™ 4000 Series Desktop Processors (AMD) Fixed in RenoirPI-FP6_1.0.0.Ec
- Fix · CNA AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics (AMD) Fixed in ComboAM4v2PI_1.2.0.11
- Fix · CNA AMD Ryzen™ Embedded V2000 Series Processors (AMD) Fixed in EmbeddedPI-FP6_1.0.0.D
Timeline
- 2026-10-02 Threatist record created from CVE-2025-48515
- 2026-10-03 Alias added: GHSA-g2pp-frgc-vmq6
More AMD vulnerabilities
- TI-2026-36341 AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization CVSS 4.0CRITICAL 9.2
- TI-2023-07046 Improper privilege management in AMD Radeon™ RX 5000 Series Graphics Cards CVSS 3.1HIGH 7.8
- TI-2023-04574 GPU kernel implementations susceptible to memory leak CVSS 3.1MEDIUM 6.5
- TI-2023-07042 Information disclosure through error messages in AMD Ryzen™ 3000 Series Desktop… CVSS 3.1MEDIUM 5.5
- TI-2023-23747 PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers… CVSS 3.1MEDIUM 5.3
- TI-2022-07839 Improper access control in System Management Mode (SMM) may allow an attacker to write to… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2025-48515 · CVE Program
- CVE-2025-48515 · NVD
- FIRST EPSS
- GHSA-g2pp-frgc-vmq6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences