AMD PMF driver CVE-2025-48519

Requires local authenticated access to a Windows system with vulnerable AMD Chipset Software versions prior to 7.06.02.123 installed. Attacker must have at minimum standard user (non-administrator) privileges to interact with the AMD PMF driver through exposed interfaces. Affected systems must be running one of the specific Ryzen processor families listed in the CPE data (6000/7000/8000 series mobile or embedded 8000 series). The AMD PMF driver must be loaded and operational, which is the default configuration when AMD Chipset Software is installed. No user interaction or special configuration is required beyond the baseline installation state. Systems running non-AMD processors, systems without AMD Chipset Software installed, or systems already updated to chipset version 7.06.02.123 or later are not vulnerable.

Real-world risk is moderate despite the CVSS 8.5 score. The vulnerability requires local access with authenticated user privileges (AV:L, PR:L), significantly limiting the attack surface compared to remotely exploitable flaws. CISA has not included this in the KEV catalog, and no public proof-of-concept exists at time of analysis, indicating active exploitation has not been confirmed. The low attack complexity (AC:L) and no user interaction requirement (UI:N) mean exploitation is straightforward once local access is obtained, making this a viable privilege escalation vector in multi-user environments or as a second-stage payload following initial compromise. The high impact ratings (VC:H/VI:H/VA:H) reflect full system compromise potential. Organizations should prioritize patching on shared workstations, terminal servers, or any system where untrusted local users have access. Single-user laptops where the primary user is already an administrator represent lower practical risk. The availability of a vendor patch (chipset version 7.06.02.123) makes remediation straightforward with minimal operational impact, raising the priority for deployment in enterprise managed environments.

An attacker with standard user credentials on a corporate laptop running vulnerable AMD Chipset Software crafts a malicious application that sends specially-formed IOCTL requests to the AMD PMF driver. The driver's improper input validation allows the attacker to trigger out-of-bounds memory writes in kernel space, corrupting a process token structure to grant SYSTEM privileges. The attacker now has full administrative control, enabling installation of persistence mechanisms, credential theft, or lateral movement to other corporate systems.