CVE-2025-54502: AMD Athlon 3000 Series Mobile Processors With Radeon Graphics

High severity, CVSS 7.5. EPSS: 0.1% chance of exploitation in the next 30 days.

Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.

Affected products

• AMD AMD Athlon 3000 Series Mobile Processors With Radeon Graphics
• AMD AMD Epyc 4004 Series Processors
• AMD AMD Epyc 7002 Series Processors
• AMD AMD Epyc 7003 Series Processors
• AMD AMD Epyc 8004 Series Processors
• AMD AMD Epyc 9004 Series Processors
• AMD AMD Epyc 9005 Series Processors
• AMD AMD Epyc 9v64h Processor
• AMD AMD Epyc Embedded 7002 Series Processors
• AMD AMD Epyc Embedded 7003 Series Processors
• AMD AMD Epyc Embedded 8004 Series Processors
• AMD AMD Epyc Embedded 9004 Series Processors Formerly Codenamed Bergamo
• AMD AMD Epyc Embedded 9004 Series Processors Formerly Codenamed Genoa
• AMD AMD Epyc Embedded 9005 Series Processors
• AMD AMD Instinct MI300A Series Processors
• AMD AMD Ryzen 3000 Series Desktop Processors
• AMD AMD Ryzen 3000 Series Mobile Processors With Radeon Graphics
• AMD AMD Ryzen 4000 Series Desktop Processors
• AMD AMD Ryzen 4000 Series Mobile Processors With Radeon Graphics
• AMD AMD Ryzen 5000 Series Desktop Processors
• AMD AMD Ryzen 5000 Series Desktop Processors With Radeon Graphics
• AMD AMD Ryzen 5000 Series Mobile Processors With Radeon Graphics
• AMD AMD Ryzen 6000 Series Processors With Radeon Graphics
• AMD AMD Ryzen 7000 Series Desktop Processors
• AMD AMD Ryzen 7000 Series Desktop Processors Formerly Codenamed Raphael
• and 37 more

Published 2026-04-16. Last modified 2026-07-15.