CVE-2025-48506

Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution.

Score

CVSS 4.0 7.3 High

Status

Awaiting Analysis - psirt@amd.com

Published

2026-08-11

Last modified

2026-08-12

Weaknesses

CWE-427

Affected products

• Vitis Unified Installer For Fpgas Adaptive Socs In Windows (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8015.html