CVE-2025-61970CWE-276CWE-732

CVE-2025-61970

published August 11, 2026

CVSS
7.3
EPSS
0%
Percentile
2.9
In the wild
Unconfirmed
What it is

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking.

The record
Technical detail
CVSS
7.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00138 · 2.9th percentile
Weaknesses
CWE-276 · Incorrect Default Permissions; CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2026-08-11T21:17Z
References (1)
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8015.html · [email protected]
EPSS history
Timeline
  • 11 AUG 17:00Z
    Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially…
    cvelistv5