AMD Zynq™ UltraScale+™ MPSoCs vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting AMD Zynq™ UltraScale+™ MPSoCs: 3 record(s), with affected versions and fixes.
CVE-2026-0461
High · 7.5
CWE-787 Oct 5, 2026
Out-of-bounds Write in AMD Zynq™ UltraScale+™ MPSoCs
Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade (DFU) download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution during the boot process. This issue could impact the confidentiality, integrity, or availability of affected system.
CVE-2025-48507
High · 8.6
CWE-1284 Nov 23, 2025
The security state of the calling processor into Arm® Trusted Firmware (TF-A) is not used and...
The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the ability to turn on and off subsystems within the SOC.
CVE-2025-0038
Medium · 6.6
CWE-1284 Oct 6, 2025
In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime...
In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality.