SecuriTricks - CVE-2025-0007

Description

Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate privileges from user space to kernel space, potentially compromising confidentiality, integrity, and/or availability.

Product(s) Impacted

Vendor	Product	Versions
Xilinx	Xilinx Run Time Framework	*

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-710

Improper Adherence to Coding Standards

The product does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
a	xilinx	xilinx_run_time_framework	/	/	/	/	/	/	/	/

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8014.html

CVSS Score

5.7 / 10

CVSS Data - 3.1

Attack Vector: LOCAL
Attack Complexity: LOW
Privileges Required: LOW
Scope: CHANGED
Confidentiality Impact: LOW
Integrity Impact: LOW
Availability Impact: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

View Vector String

Timeline

Published: Nov. 24, 2025, 9:16 p.m.
Last Modified: Nov. 25, 2025, 10:16 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

psirt@amd.com

CVE-2025-0007