Skip to content
OpenAdvisories
Medium · 6.6 CVE-2025-0038 EUVD-2025-32160GHSA-x5mj-44gj-729v

In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow acce…

Published Oct 6, 2025 · Updated Oct 6, 2025 · Assigned by AMD

Description

In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality.

Affected products

VendorProductAffectedFixed
AMD Kria(TM) SOM PMU Firmware version TBD —
AMD Zynq UltraScale+ MPSoCs PMU Firmware version TBD —
AMD Zynq UltraScale+ RFSoCs PMU Firmware version TBD —

References