CVE-2025-0014

{"id": "CVE-2025-0014", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@amd.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.3}]}, "published": "2025-04-02T17:15:41.183", "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7037.html", "source": "psirt@amd.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@amd.com", "description": [{"lang": "en", "value": "CWE-276"}]}], "descriptions": [{"lang": "en", "value": "Incorrect default permissions on the AMD Ryzen(TM) AI installation folder could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution."}, {"lang": "es", "value": "Los permisos predeterminados incorrectos en la carpeta de instalaci\u00f3n de AI AMD Ryzen (TM) podr\u00edan permitir que un atacante alcance la escalada de privilegios, lo que podr\u00eda dar como resultado una ejecuci\u00f3n de c\u00f3digo arbitraria."}], "lastModified": "2025-04-07T14:18:49.830", "sourceIdentifier": "psirt@amd.com"}