CVE-2025-48503

Summary

A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

Affected Software

VendorProductVersion RangeStatus
AMDAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed “Renoir”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed “Rembrandt R”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed “Picasso”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed “Phoenix”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Ryzen™ 7020 Series Processors with Radeon™ Graphics (formerly codenamed “Mendocino”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics (formerly codenamed “Dragon Range”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed “Raphael”/“Raphael X3D”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics (formerly codenamed “Barcelo R”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Ryzen™ AI 300 Series Processors (formerly codenamed “Strix Point”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed “Raphael”/“Raphael-X3D”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed “Phoenix”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed “Phoenix”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Ryzen™ 9000 Series Desktop Processors (formerly codenamed “Granite Ridge”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed “Cezanne”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed “Lucienne”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed “Barcelo”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Ryzen™ 4000 Series Desktop Processors (formerly codenamed “Renoir”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics (formerly codenamed “Cezanne”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed “Hawk Point”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed “Dali”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed “Dali”)amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Radeon™ RX 5000 Series Graphics Productsamd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Radeon™ RX 6000 Series Graphics Productsamd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Radeon™ RX 7000 Series Graphics Productsamd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDPlaceholderamd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Radeon™ PRO W5000 Series Graphics Productsamd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Radeon™ PRO W6000 Series Graphics Productsamd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Radeon™ PRO W7000 Series Graphics Productsamd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected
AMDAMD Radeon™ RX 9000 Series Graphics Productsamd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exeunaffected

Weaknesses

  • CWE-427: CWE-427 Uncontrolled Search Path Element

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References