CVE-2025-0037
Last modified
CVE-2025-0037 is a medium-severity vulnerability rated 6.6/10 on the CVSS scale. In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow access to isolated or protected memory spaces, resulting in the loss of integrity and confidentiality.. EPSS estimates a 0.14% chance of exploitation in the next 30 days.
Description
In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow access to isolated or protected memory spaces, resulting in the loss of integrity and confidentiality.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-0037?
How severe is CVE-2025-0037?
How do I fix CVE-2025-0037?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-0031A use after free in the SEV firmware could allow a malicous …4.6
- CVE-2025-0032Improper cleanup in AMD CPU microcode patch loading could al…7.2
- CVE-2025-0033Improper access control within AMD SEV-SNP could allow an ad…6
- CVE-2025-0034Insufficient parameter sanitization in TEE SOC Driver could …4.7
- CVE-2025-0035Unquoted search path within AMD Cloud Manageability Service …7.3
- CVE-2025-0036In AMD Versal Adaptive SoC devices, the incorrect configurat…3.2
- CVE-2025-0038In AMD Zynq UltraScale+ devices, the lack of address validat…6.6
- CVE-2025-0040Improper access control between the Joint Test Action Group …5.3
- CVE-2025-0041Uncontrolled search paths in the Vitis™ Embedded Single File…4.6
- CVE-2025-0044An out-of-bounds read in power management firmware by a mali…4.8
- CVE-2025-0045Improper Input validation in the AMD Secure Processor (ASP) …6.9
- CVE-2025-0046Incorrect directory permissions could allow a local user to …7
Are you affected by CVE-2025-0037?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST