CVE-2025-48506

Severity: medium (CVSS 4.6 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-11 · updated 2026-09-29
Weakness: CWE-427

Description

Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution.

Affected products

AMD Vitis™ Unified Installer for FPGAs & Adaptive SoCs in Windows: all versions

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8015.html

Get alerted when CVE-2025-48506 or the next vulnerability affects your stack