CVE-2025-0037
CVE-2025-0037
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.6EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
09 Jun 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow access to isolated or protected memory spaces, resulting in the loss of integrity and confidentiality.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Affected products
AMD · Platform Loader and Manager (PLM)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →