CVE-2025-0037
BaseFortify
Publication date: 2025-06-10
Last updated on: 2025-06-12
Assigner: Advanced Micro Devices Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-20 | The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in AMD's Versal Adaptive SoC devices involves the Platform Loader and Manager (PLM) firmware not validating memory addresses when executing runtime services. Because the PLM firmware does not check if the requesting remote processor has proper access rights to specified memory regions, it can allow unauthorized access or modification of isolated or protected memory spaces. This can lead to loss of integrity and confidentiality of sensitive data within the device. [1]
How can this vulnerability impact me? :
The vulnerability can allow a remote processor to access or overwrite protected memory regions without authorization. This can result in unauthorized modification of critical data, loss of data integrity, and exposure of confidential information. Additionally, it can cause high impact on availability by potentially disrupting device operations. [1]