CVE-2025-48503CWE-427

A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code…

High · published February 11, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

⚡ Watch out! A DLL hijacking flaw in the AMD Software Installer could let attackers escalate privileges without breaking a sweat. 🔥 Think of this vulnerability like a clever impersonator slipping into a VIP event by using someone else's credentials — it could grant them full access without raising any alarms. If exploited, an attacker could run any code they like with elevated privileges, potentially taking over a system entirely. This means they could install malware, steal sensitive information, or even sabotage critical functions, leading to chaos!

Put simply

Think of this vulnerability like a clever impersonator slipping into a VIP event by using someone else's credentials — it could grant them full access without raising any alarms. This vulnerability arises from the AMD Software Installer failing to validate the DLLs it loads, allowing an attacker to place malicious DLLs in the search path and execute arbitrary code during installation.

What to do

If exploited, an attacker could run any code they like with elevated privileges, potentially taking over a system entirely. This means they could install malware, steal sensitive information, or even sabotage critical functions, leading to chaos! To remediate this issue, update the AMD Software Installer to the latest version as soon as it’s available. Additionally, ensure that only trusted users have access to the system where the installer runs to minimize risk. You've got this! Stay vigilant, keep your software updated, and you'll be a security superhero in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00148 · 3.7th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2026-02-11T14:26Z
EPSS history
Timeline
  • 11 FEB 14:26Z
    A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code…
    cvelistv5