AI description
CVE-2025-54502 is a vulnerability found in WebKit, which could lead to an unexpected process crash when processing maliciously crafted web content. This issue was addressed through improved checks by Apple. The fix has been implemented in various Apple operating systems and browsers, including watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2, iPadOS 18.2, and Safari 18.2.
- Description
- Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.
- Source
- psirt@amd.com
- NVD status
- Awaiting Analysis
CVSS 4.0
- Type
- Secondary
- Base score
- 7.1
- Impact score
- -
- Exploitability score
- -
- Vector string
- CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity
- HIGH
CVSS 3.1
- Type
- Secondary
- Base score
- 7.5
- Impact score
- 6
- Exploitability score
- 0.8
- Vector string
- CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
- Severity
- HIGH
- Hype score
- Not currently trending
ZeroNights 2026 program released with 30+ talks on offensive research. Key sessions cover femtocell key extraction, AdINT de-anonymization via operator APIs, AMD APCB exploitation (CVE-2025-54502), Qualcomm BootROM EDL bypass (CVE-2026-25262), Linux kernel struct device race
@WorldCyberNewsX
22 Sept 2026
0 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-54502 Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privile… https://t.co/3TNp9jEqt7
@CVEnew
17 Apr 2026
104 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
The research has been published. In it, I describe the structure of APCB, show the functionality of the SMM driver that responds to it, and show where the CVE-2025-54502 vulnerability was. https://t.co/ljqoLjJtP1
@xsh3llsh0ck
15 Apr 2026
2475 Impressions
5 Retweets
17 Likes
8 Bookmarks
0 Replies
2 Quotes
🔥 Read the new article by our researcher Timofey Duditsky. The write-up dives into the AMD Platform Configuration Blobs mechanism, shows how it works, and reveals the vulnerability CVE-2025-54502. https://t.co/DQHz8M5bRN https://t.co/bJzYSDZfn8
@ptswarm
15 Apr 2026
2007 Impressions
11 Retweets
26 Likes
6 Bookmarks
0 Replies
1 Quote
AMD has published Security Bulletin AMD-SB-7054 with my vulnerability CVE-2025-54502. There has been no feedback on my research (as well as my mention), so I will publish my work as it is and as soon as possible.
@xsh3llsh0ck
14 Apr 2026
3161 Impressions
4 Retweets
26 Likes
10 Bookmarks
2 Replies
0 Quotes