CVE-2025-0038
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Kria(TM) SOM
- Vendor
- AMD
- Product
- Kria(TM) SOM
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| PMU Firmware version TBD | affected | Unavailable | Unavailable | Unavailable | None listed |
Zynq UltraScale+ MPSoCs
- Vendor
- AMD
- Product
- Zynq UltraScale+ MPSoCs
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| PMU Firmware version TBD | affected | Unavailable | Unavailable | Unavailable | None listed |
Zynq UltraScale+ RFSoCs
- Vendor
- AMD
- Product
- Zynq UltraScale+ RFSoCs
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| PMU Firmware version TBD | affected | Unavailable | Unavailable | Unavailable | None listed |