CVE-2025-0003CWE-413

CVE-2025-0003

High · published November 25, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
7.3
In the wild
Unconfirmed
What it is

⚡ A sneaky use-after-free condition lurks in Xilinx Run time, ready for local attackers to exploit! 🦸‍♂️ Think of it like a restaurant that, after a dish is served, forgets to remove the empty plate from the table. This could lead to confusion about what’s still available, giving someone a chance to tamper with orders. An attacker could leverage this vulnerability to cause serious disruptions, resulting in loss of confidential information or even making the system unavailable. Imagine a table full of important data that suddenly gets mixed up or erased—absolutely devastating!

Put simply

Think of it like a restaurant that, after a dish is served, forgets to remove the empty plate from the table. This could lead to confusion about what’s still available, giving someone a chance to tamper with orders. This use-after-free vulnerability arises when memory is accessed after it has been released, leading to undefined behavior and potential exploitation by local attackers.

What to do

An attacker could leverage this vulnerability to cause serious disruptions, resulting in loss of confidential information or even making the system unavailable. Imagine a table full of important data that suddenly gets mixed up or erased—absolutely devastating! To protect against this, upgrade to the latest version of the Xilinx Run time that addresses the issue. Also, conduct a security audit of your systems to identify any other potential vulnerabilities. Regularly check for patches to ensure you remain secure! You've got this! By following these steps, you'll shore up your defenses in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00181 · 7.3th percentile
Weakness
CWE-413 · Improper Resource Locking
Published
2025-11-25T02:16Z
References (1)
EPSS history
Timeline
  • 24 NOV 20:36Z
    Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of…
    cvelistv5