Weak Permissions in Vitis Unified Installation Path on Windows Devices by AMD
CVE-2025-61970

7.3HIGH

Key Information:

Vendor

Amd
Status
Vitis™ Embedded Single File Download (sfd) For Windows
Vendor
CVE Published:
11 August 2026

What is CVE-2025-61970?

The Vitis Unified installation path on local Windows machines exhibits weak permission settings. This loophole allows a low-privileged user to potentially create and execute arbitrary code, leading to risks such as binary hijacking. Users and administrators are advised to review their security configurations to mitigate these vulnerabilities.

Affected Version(s)

Vitis™ Embedded Single File Download (SFD) for Windows 2026.1

References

https://www.amd.com/en/resources/product-security/bulleti...

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.