VulnAI


EUVD-2025-32160

ID: EUVD-2025-32160

Severity: medium

CVSS v4: Not provided

CVSS v3: 6.6 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)

CWE: None listed

Source: ENISA

Description

In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality.

Timestamps

References

No references provided.