CVE-2025-61970

Awaiting Analysis Awaiting Analysis - Queue

Weak Permissions in Vitis Unified Allow Binary Hijacking

Publication date: 2026-08-11

Last updated on: 2026-08-12

Assigner: Advanced Micro Devices Inc.

Description

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-12

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2025-61970

EUVD

EUVD-2025-210686

Affected Vendors & Products

Vendor	Product	Version / Range
amd	vitis_unified	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-732	The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
CWE-276	During installation, installed file permissions are set to allow anyone to modify those files.

Attack-Flow Graph

Executive Summary

This vulnerability involves weak permissions in the Vitis Unified installation path on local Windows machines. A low-privileged user could exploit this to create arbitrary code, potentially leading to binary hijacking where malicious code replaces legitimate files.

Impact Analysis

An attacker with low privileges could execute arbitrary code on your system, potentially gaining control over installed applications or disrupting operations. This could lead to data theft, system compromise, or unauthorized access.

Compliance Impact

This vulnerability may violate compliance requirements that mandate strict access controls and integrity of software installations, such as GDPR's data protection principles or HIPAA's security rules for safeguarding sensitive data.

Mitigation Strategies

Check Vitis Unified installation permissions on Windows systems. Ensure the installation directory has restricted write access to prevent unauthorized code creation. Update to the latest version if available.

Hi! I’m here to help you understand CVE-2025-61970. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70