This vulnerability (CVE-2025-48516) arises from an insecure default configuration state of the DDR5 memory module managed by the AGESA Bootloader Firmware in AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics. The issue is due to incorrect default permissions (CWE-276) that leave the PMIC interface unprotected. An attacker with local user privileges could exploit this to create a permanent denial of service condition or compromise the integrity of the memory module. The CVSS 4.0 base score is 6.9, reflecting a medium severity with local attack vector and low complexity. No official remediation or patch has been documented as of the published date.

An attacker with local user privileges can exploit the insecure default permissions in the AGESA Bootloader Firmware to abuse the PMIC interface. This can result in a permanent denial of service condition or affect the integrity of the DDR5 memory module. The impact is limited by the requirement for local access and privileges. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official remediation or patch has been provided by AMD, users should monitor AMD's advisories for updates. Until a fix is available, restricting local user access and privileges may reduce risk but no specific mitigations are documented.