6.6
Medium
CVE-2025-0038 In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU…
Description
In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Kria(TM) SOM | Versions not published | |
| Zynq UltraScale+ MPSoCs | Versions not published | |
| Zynq UltraScale+ RFSoCs | Versions not published |