CVE-2025-0038
- State
- Published
- Severity
- 6.6 Medium
- Published
- Oct 6, 2025
- Updated
- Oct 6, 2025
- Reserved
- Nov 21, 2024
Description
In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.6 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H | AMD |
Weaknesses
- CWE-1284 Improper Validation of Specified Quantity in Input
Affected Products
| Product | Versions |
|---|---|
Kria(TM) SOMAMD |
|
Zynq UltraScale+ MPSoCsAMD |
|
Zynq UltraScale+ RFSoCsAMD |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.