AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AMDCVE-2025-61970

AMD: insecure default permissions

AMD

CVE-2025-61970 · Published Aug 11, 2026 · updated Sep 29, 2026

Low1.0
No fix yet
AMD advisory

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
CVSS 4.0
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-276, CWE-732

More AMD advisories

All AMD
High 7.0Aug 11AMD: privilege escalationCVE-2025-0046no fix yetHigh 7.0Aug 11AMD: untrusted search pathCVE-2025-54512no fix yetMedium 5.6Aug 11AMD Ryzen Master Utility Driver: use after freeCVE-2026-0465no fix yetHigh 8.5Aug 11AMD: timing side channelCVE-2026-43606no fix yetLow 1.0Aug 11AMD: code executionCVE-2025-48505no fix yetMedium 4.6Aug 11AMD: code executionCVE-2025-48506no fix yet