Use After Free in AMD Athlon™ 3000 Series Desktop Processors With Radeon™ Graphics (Formerly Codenamed "Picasso")
CVE-2025-48521
Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condition, potentially resulting in a loss of platform integrity or crash.
Vulnerability class: Use-After-Free
Published · last modified .
EPSS exploit prediction
EPSS: 0.001 (0.9th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 1st percentile — 0.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: 0.000
Affected products
- AMD Athlon™ 3000 Series Desktop Processors With Radeon™ Graphics (Formerly Codenamed "Picasso") — versions AMD Ryzen™ Chipset Driver 7.02.13.148
- AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics (Formerly Codenamed "Dali") — versions AMD Ryzen™ Chipset Driver 7.02.13.148
- AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics (Formerly Codenamed "Picasso") — versions AMD Ryzen™ Chipset Driver 7.02.13.148
- AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics (Formerly Codenamed "Pollock") — versions AMD Ryzen™ Chipset Driver 7.02.13.148
- AMD Epyc™ 4004 Series Processors — versions AMD Chipset Driver 7.02.13.148
- AMD Epyc™ 4005 Series Processors — versions AMD Chipset Driver 7.02.13.148
- AMD Epyc™ Embedded 4004 Series Processors — versions AM5 Windows Chipset Drivers with Digital Signature Fix (64284)
- AMD Epyc™ Embedded 4005 Series Processors — versions AM5 Windows Chipset Drivers with Digital Signature Fix (64284)
- AMD Epyc™ Embedded 8004 Series Processors — versions Q4 - 2025 AMD Embedded Windows® Chipset drivers (71816)
- AMD Epyc™ Embedded 9000 Series Processors — versions Q4 - 2025 AMD Embedded Windows® Chipset drivers (71816)