PT-2025-24580 · Amd · Amd Versal Adaptive Soc

Published 2025-06-09 · Updated 2025-06-10 · CVE-2025-0037

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions AMD Versal Adaptive SoC devices (affected versions not specified)

Description The issue arises from the lack of address validation when executing PLM runtime services through the PLM firmware, allowing access to isolated or protected memory spaces. This can result in the loss of integrity and confidentiality. Vulnerabilities of this nature could lead to security breaches, such as data exposure or manipulation, if exploited by malicious actors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-0037

Affected Products

Amd Versal Adaptive Soc

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-0037 · Security Note
• https://twitter.com/CVEnew/status/1932244167532359953 · Twitter Post
• https://twitter.com/transilienceai/status/1932284364559126676 · Twitter Post
• https://t.me/cvetracker/25836 · Telegram Post
• https://amd.com/en/resources/product-security/bulletin/amd-sb-8010.html · Note
• https://twitter.com/transilienceai/status/1932284361866366996 · Twitter Post
• https://t.me/cvenotify/125178 · Telegram Post