CVE-2025-0036

State: Published
Severity: 3.2 Low
Published: Jun 9, 2025
Updated: Jun 30, 2025
Reserved: Nov 21, 2024

Description

In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime (post-boot) cryptographic operations could cause data to be incorrectly written to and read from invalid locations as well as returning incorrect cryptographic data.

Scores

CVSS	Score	Vector	Source
3.1	3.2 Low	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N	AMD

Weaknesses

CWE-682 Incorrect Calculation
CWE-772 Missing Release of Resource after Effective Lifetime
CWE-940 Improper Verification of Source of a Communication Channel
CWE-941 Incorrectly Specified Destination in a Communication Channel
CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere

Affected Products

Product	Versions
Versal Adaptive SoC DevicesAMD	2025.1 releaseNot affected
Versal RF SeriesAMD	2025.1 releaseNot affected
Versal AI Edge SeriesAMD	2025.1 releaseNot affected
Versal Prime SeriesAMD	2025.1 releaseNot affected
Versal Premium SeriesAMD	2025.1 releaseNot affected
Versal AI Core SeriesAMD	2025.1 releaseNot affected
Versal HBM SeriesAMD	2025.1 releaseNot affected
Alveo V80 Compute AcceleratorAMD	2025.1 releaseNot affected

References

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8011.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.