CVE-2025-48515 MEDIUM

CVE-2025-48515

Weakness CWE-190

Published February 10, 2026

Last update February 10, 2026

View on NVD All CVEs

CVSS base score

5.4/10

Attack vector Physical

Attack complexity High

Privileges required High

User interaction —

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:P/AC:H/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting in arbitrary code execution.

Key dates

02Disclosure timeline

February 10, 2026 CVE published

February 10, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-48515 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/190.html

Related vulnerabilities

CVE-2025-48515

01Description

02Disclosure timeline

03References

04Related CVE