CVE-2025-48505

Awaiting Analysis Awaiting Analysis - Queue

Weak Permissions in Vitis Unified Allow Privilege Escalation

Publication date: 2026-08-11

Last updated on: 2026-08-12

Assigner: Advanced Micro Devices Inc.

Description

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-12

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2025-48505

EUVD

EUVD-2025-210688

Affected Vendors & Products

Vendor	Product	Version / Range
amd	vitis_unified	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-276	During installation, installed file permissions are set to allow anyone to modify those files.

Attack-Flow Graph

Executive Summary

This vulnerability involves weak permissions in the Vitis Unified installation path on local Windows machines. A low-privileged user could exploit these weak permissions to escalate privileges and potentially execute arbitrary code.

Impact Analysis

A low-privileged user could gain elevated privileges on the system, allowing them to run unauthorized code. This could lead to data breaches, system compromise, or further network infiltration if the affected system is part of a larger network.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it involves local Windows installation permissions and does not expose sensitive data or violate privacy requirements.

Mitigation Strategies

Check Vitis Unified installation permissions on Windows systems. Ensure the installation directory has restricted write access to low-privileged users. Update to the latest version if available.

Hi! I’m here to help you understand CVE-2025-48505. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70