CVE-2025-48503 
A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
Problem types: cwe_id: CWE-427
description: CWE-427  Uncontrolled Search Path Element
Affected products: vendor: AMD
product: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Renoir")
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R")
default_status: affected
vendor: AMD
product: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Picasso")
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Phoenix")
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics (formerly codenamed "Mendocino")
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Dragon Range")
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael"/"Raphael X3D")
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Barcelo R")
default_status: affected
vendor: AMD
product: AMD Ryzen™ AI 300 Series Processors (formerly codenamed "Strix Point")
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael"/"Raphael-X3D")
default_status: affected
vendor: AMD
product: AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix")
default_status: affected
vendor: AMD
product: AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix")
default_status: affected
vendor: AMD
product: AMD Ryzen™ 9000 Series Desktop Processors (formerly codenamed "Granite Ridge")
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Cezanne")
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Lucienne")
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Barcelo")
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Desktop Processors (formerly codenamed "Renoir")
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics (formerly codenamed "Cezanne")
default_status: affected
vendor: AMD
product: AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Hawk Point")
default_status: affected
vendor: AMD
product: AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Dali")
default_status: affected
vendor: AMD
product: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Dali")
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 5000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 7000 Series Graphics Products
default_status: affected
vendor: AMD
product: Placeholder
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W5000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W7000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 9000 Series Graphics Products
default_status: affected
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
Credits: lang: en
value: Reported through AMD Bug Bounty Program
Published: 2026-02-11T14:26:49.430Z