PT-2025-24579 · Amd · Amd Versal Adaptive Soc

Published 2025-06-09 · Updated 2025-06-10 · CVE-2025-0036

Positive Technologies (AI Summary)

CVSS v3.1

3.2

Low

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions AMD Versal Adaptive SoC devices (affected versions not specified)

Description The issue arises from the incorrect configuration of the Secure Stream Switch (SSS) during runtime, specifically after the system has booted, which could cause data to be incorrectly written to and read from invalid locations as well as returning incorrect cryptographic data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-682

CWE-772

CWE-497

CWE-941

CWE-940

Related Identifiers

BDU:2025-15006

CVE-2025-0036

Affected Products

Amd Versal Adaptive Soc

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-0036 · Security Note
• https://bdu.fstec.ru/vul/2025-15006 · Security Note
• https://twitter.com/CVEnew/status/1932244166609629203 · Twitter Post
• https://amd.com/en/resources/product-security/bulletin/amd-sb-8011.html · Note
• https://twitter.com/transilienceai/status/1932289577777062290 · Twitter Post
• https://docs.amd.com/r/en-US/000037718/000037718-Design-Advisory-for-Versal-Improper-Configuration-of-the-Secure-Stream-Switch-during-Post-Boot-Cryptographic-Operations · Note
• https://t.me/cvenotify/125177 · Telegram Post
• https://t.me/cvetracker/25835 · Telegram Post