Memory Exposure Vulnerability in AMD Versal Adaptive SoC Devices
CVE-2025-0037

6.6MEDIUM

Key Information:

Vendor

Amd
Status
Platform Loader And Manager (plm)
Vendor
CVE Published:
10 June 2025

What is CVE-2025-0037?

A vulnerability in AMD's Versal Adaptive SoC devices arises from inadequate address validation during the execution of PLM runtime services via the PLM firmware. This oversight may permit unauthorized access to isolated or protected memory spaces, leading to potential unauthorized data disclosure and breaches of confidentiality and integrity.

Affected Version(s)

Platform Loader and Manager (PLM) Refer to AMD-SB-8010

References

https://www.amd.com/en/resources/product-security/bulleti...

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.