CVE-2025-54517

HighCVSS 8.5/10Last modified Oct 14, 2026

Description

Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution.

Metrics

CVSS 4.0 8.5/10CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-787

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
May 15, 2026
Last modified
Oct 14, 2026
NVD status
Awaiting Analysis

Related CVEs from 2025

CVE-2025-545187.0Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructionCVE-2025-545197.3A DLL hijacking vulnerability in Doc Nav could allow a local attacker to achieve privilege escalation, potentially resulting in arbitrary coCVE-2025-54526.6A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potCVE-2025-545208.6Improper Protection Against Voltage and Clock Glitches in FPGA devices, could allow an attacker with physical access to undervolt the platfoCVE-2025-545257.5Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant CVE-2025-545267.8Fuji Electric Monitouch V-SFT-6 is vulnerable to a stack-based buffer overflow while processing a specially crafted project file, which mayCVE-2025-545276.1In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allowCVE-2025-545288.8In JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flowCVE-2025-545297.5In JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integrationCVE-2025-545309.8In JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory permissionsCVE-2025-545319.4In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on WindowsCVE-2025-545324.3In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via snapshot dependencies
CVE-2025-54517: High severity, CVSS 8.5 | Vulnix