Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2025-0038

In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD Kria(TM) SOM

Default version status: affected

  • PMU Firmware version TBDaffected

AMD Zynq UltraScale+ MPSoCs

Default version status: affected

  • PMU Firmware version TBDaffected

AMD Zynq UltraScale+ RFSoCs

Default version status: affected

  • PMU Firmware version TBDaffected

References