Skip to content
6.6 Medium

CVE-2025-0038 In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU…

Description

In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality.

Affected products and versions

Product Affected versions Fixed in
Kria(TM) SOM Versions not published
Zynq UltraScale+ MPSoCs Versions not published
Zynq UltraScale+ RFSoCs Versions not published
Track this CVE