CVE-2025-48507

State: Published
Severity: 8.6 High
Published: Nov 23, 2025
Updated: Jan 14, 2026
Reserved: May 22, 2025

Description

The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the ability to turn on and off subsystems within the SOC.

Scores

CVSS	Score	Vector	Source
4.0	8.6 High	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H	AMD

Weaknesses

CWE-1284 Improper Validation of Specified Quantity in Input

Affected Products

Product	Versions
Kria™ SOMAMD	Version TBDAffected
Zynq™ UltraScale+™ MPSoCsAMD	Version TBDAffected
Zynq™ UltraScale+™ RFSoCsAMD	Version TBDAffected

References

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8017.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.