Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-48507

The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-secure processors access to secure memories, access to crypto o

Description

The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the ability to turn on and off subsystems within the SOC.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD Kria™ SOM

Default version status: affected

  • Version TBDaffected

AMD Zynq™ UltraScale+™ MPSoCs

Default version status: affected

  • Version TBDaffected

AMD Zynq™ UltraScale+™ RFSoCs

Default version status: affected

  • Version TBDaffected

References