CVE-2025-0007

Published: Nov 24, 2025Modified: Jun 17, 2026Deferred

5.7

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Exploitability: 1.5 / Impact: 3.7

Source: psirt@amd.com (Secondary)

Description

Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate privileges from user space to kernel space, potentially compromising confidentiality, integrity, and/or availability.

Related CWEs

CWE-710

Improper Adherence to Coding Standards

The product does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.

References (1)

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html

Source: psirt@amd.com

Timeline

No history available yet.