Privilege Escalation via Improper Directory Permissions in AMD Radeon Software
CVE-2025-0046 Published on August 11, 2026

Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrary code execution.

NVD

Vulnerability Analysis

CVE-2025-0046 is exploitable with local system access. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
PASSIVE

Weakness Type

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. When a resource is given a permissions setting that provides access to a wider range of actors than required, it could lead to the exposure of sensitive information, or the modification of that resource by unintended parties. This is especially dangerous when the resource is related to program configuration, execution or sensitive user data.


Affected Versions

AMD Power Design Manager (PDM) Software Installer for Windows Version 2026.1 is unaffected by CVE-2025-0046

Exploit Probability

EPSS
0.11%
Percentile
1.35%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.