PT-2025-36462 · Amd · Xilinx Run Time

Published 2025-09-08 · Updated 2025-11-24 · CVE-2025-0005

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions API Gateway version 7.2.0

Description A flaw in input validation within the XOCL driver could allow a local attacker to trigger an integer overflow, potentially leading to a crash or denial of service. Additionally, an information disclosure issue exists in the API Gateway, allowing unauthenticated remote attackers to access sensitive information through a specially crafted HTTP request due to improper access control in API endpoints.

Recommendations Update to API Gateway version 7.2.1 and implement proper access controls.

Fix

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2025-0005

Affected Products

Xilinx Run Time

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-0005 · Security Note
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html · Note
• https://t.me/CVEtracker/38109 · Telegram Post
• https://reddit.com/r/InfosecFixes/comments/1nbjqp0/cve20250005_high_7510_may_20_2025_improper_access · Reddit Post
• https://twitter.com/VulmonFeeds/status/1993071647054549487 · Twitter Post
• https://twitter.com/CVEnew/status/1993052447712199152 · Twitter Post