CVE-2025-48505

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution...

CVE-2025-48506

Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution...

CVE-2025-61970

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...

EUVD-2025-210688

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution...

CVE-2025-48505

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution...

CVE-2025-48505

CVE-2025-48505 affects the Vitis™ Unified installation path on local Windows machines. Weak permissions could let a low-privileged user escalate to privileged execution, potentially enabling arbitrary code execution. The provided documents do not specify exact vulnerable files, exact permission s...

CVE-2025-48506

Technical details about CVE-2025-48506 are not publicly available in the provided documents. Monitor for updates from AMD/NVD for affected products, versions, impact, and remediation.

EUVD-2025-210687

Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution...

CVE-2025-48506

Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution...

CVE-2025-61970

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...

CVE-2025-61970

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...

CVE-2025-61970

CVE-2025-61970 affects the Vitis™ Unified installation path on local Windows machines. The root issue is weak permissions in the installation directory, which could allow a low-privileged user to create arbitrary code and potentially cause binary hijacking. The provided documents do not specify e...

EUVD-2025-210686

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...

PT-2026-70362

Name of the Vulnerable Software and Affected Versions Vitis Unified affected versions not specified Description Uncontrolled search paths in the installation path on local Windows machines allow for DLL injection. This occurs when an application searches for a Dynamic Link Library DLL—a shared...

PT-2026-70363

Name of the Vulnerable Software and Affected Versions Vitis Unified affected versions not specified Description Weak permissions in the installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking, which is the...

PT-2026-70361

Name of the Vulnerable Software and Affected Versions Vitis Unified affected versions not specified Description Weak permissions in the installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution...

Vitis™ Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-43606| Observable Timing Discrepancy in the Vitis™ Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagneti...