CVEvulnerability

CVE-2025-0038

6.6 MEDIUM Published 2025-10-06 Modified 2026-10-18 Official page ↗
Status
Deferred
Published
2025-10-06
Last modified
2026-10-18
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.6 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Weaknesses
CWE-1284

Description

In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality.

Related

Weakness · CWE (1)

  • CWE-1284 Improper Validation of Specified Quantity in Input weakness

References