CVE-2025-0036
In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime (post-boot) cryptographic operations could cause data to be incorrectly written to and read from invalid locations as well as returning incorrect cryptographic data.
Scoring
- Severity
- LOW
- CVSS base score
- 3.2
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
- EPSS probability
- 0.14%
- CWE
- CWE-682, CWE-772, CWE-940, CWE-941, CWE-497
- Published
- 2025-06-09
- Last modified
- 2026-03-13
Affected products
- AMD Versal Adaptive SoC Devices
- AMD Versal RF Series
- AMD Versal AI Edge Series
- AMD Versal Prime Series
- AMD Versal Premium Series
- AMD Versal AI Core Series
- AMD Versal HBM Series
- AMD Alveo V80 Compute Accelerator
Weakness type
Related vulnerabilities
- CVE-2026-86736 — snipe-it before 8.7.0 Checkout Request Counter Integrity Failure
- CVE-2026-53706 — PREVAIL: ALU32 pointer arithmetic accepted without is64 gate — verifier emits false PASS for pointer-corrupting programs
- CVE-2026-53670 — PREVAIL: Non-singleton typeset in add() skips offset update, allowing OOB access to pass eBPF verification
- CVE-2026-53671 — PREVAIL: Context-write no-op in do_mem_store allows unsafe eBPF programs to pass verification
- CVE-2026-20275 — Cisco IOS XR Software Security Hardening Release: September 2026
- CVE-2026-54754 — Klever-Go: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)
- CVE-2026-76043 — Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to...
- CVE-2026-71479 — New API: Integer overflow in quota billing yields negative charges (self-crediting)