CVE-2025-48516CWE-276

Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the…

Medium · published May 15, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
0.4
In the wild
Unconfirmed
What it is

Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the unprotected PMIC interface to create a permanent denial of service condition or affect the integrity of the memory module.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
EPSS
0.00091 · 0.4th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2026-05-15T02:37Z
EPSS history
Timeline
  • 15 MAY 02:37Z
    Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the…
    cvelistv5