CVE-2025-0036

Description

In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime (post-boot) cryptographic operations could cause data to be incorrectly written to and read from invalid locations as well as returning incorrect cryptographic data.

PUBLISHED Reserved 2024-11-21 | Published 2025-06-09 | Updated 2025-06-30 | Assigner AMD

Problem types

CWE-682 Incorrect Calculation

CWE-772 Missing Release of Resource after Effective Lifetime

CWE-940 Improper Verification of Source of a Communication Channel

CWE-941 Incorrectly Specified Destination in a Communication Channel

CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere

Product status

References

www.amd.com/...es/product-security/bulletin/amd-sb-8011.html

cve.org (CVE-2025-0036)

nvd.nist.gov (CVE-2025-0036)

Download JSON