CVE-2025-0037CWE-20
In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow access to isolated or…
Medium · published June 9, 2025
What it is
In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow access to isolated or protected memory spaces, resulting in the loss of integrity and confidentiality.
The record
Technical detail
- CVSS v3.1
- 6.6 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00168 · 5.8th percentile
- Weakness
- CWE-20 · Improper Input Validation
- Published
- 2025-06-09T23:52Z
EPSS history
Timeline