CVE-2025-61970

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking.

Score

CVSS 4.0 7.3 High

Status

Awaiting Analysis - psirt@amd.com

Published

2026-08-11

Last modified

2026-08-12

Weaknesses

CWE-276, CWE-732

Affected products

• Vitis Embedded Single File Download Sfd For Windows (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8015.html