CVE-2025-48503: A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution | LiveThreat CVE Feed — Verisq

Login Request a demo

High severity · published Feb 11, 2026

CVE-2025-48503

A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution

7.8

CVSS

0.1%

EPSS

No

On KEV

Description

A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack vector

Local

Complexity

High

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Changed

Exploitation

Is it being used?

Exploit prediction (EPSS)0.1% · higher than 4% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

AA

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Dali") · AMD

All versions, or not specified · source: vendor

AA

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Picasso") · AMD

All versions, or not specified · source: vendor

AR

AMD Radeon™ PRO W5000 Series Graphics Products · AMD

All versions, or not specified · source: vendor

AR

AMD Radeon™ PRO W6000 Series Graphics Products · AMD

All versions, or not specified · source: vendor

AR

AMD Radeon™ PRO W7000 Series Graphics Products · AMD

All versions, or not specified · source: vendor

AR

AMD Radeon™ RX 5000 Series Graphics Products · AMD

All versions, or not specified · source: vendor

AR

AMD Radeon™ RX 6000 Series Graphics Products · AMD

All versions, or not specified · source: vendor

AR

AMD Radeon™ RX 7000 Series Graphics Products · AMD

All versions, or not specified · source: vendor

AR

AMD Radeon™ RX 9000 Series Graphics Products · AMD

All versions, or not specified · source: vendor

AR

AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Dali") · AMD

All versions, or not specified · source: vendor

AR

AMD Ryzen™ 4000 Series Desktop Processors (formerly codenamed "Renoir") · AMD

All versions, or not specified · source: vendor

AR

AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Renoir") · AMD

All versions, or not specified · source: vendor

Affected product

AA

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Dali")

AMD

All AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Dali") CVEs

References

https://nvd.nist.gov/vuln/detail/CVE-2025-48503

https://www.cve.org/CVERecord?id=CVE-2025-48503

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6024.html

More from AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Dali")

7.0

Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve privilege escalation…

6.9

Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condition, potentially resulting in a loss of…