What’s Vulnerable › Vulnerabilities

CVE-2025-54515

• Severity: low (CVSS 1.0 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-23 · updated 2026-10-18
• Weakness: CWE-1284

Description

The Secure Flag passed to Versal™ Adaptive SoC’s Trusted Firmware for Cortex®-A processors (TF-A) for Arm’s Power State Coordination Interface (PSCI) commands were incorrectly set to secure instead of using the processor’s actual security state. This would allow the PSCI requests to appear they were from processors in the secure state instead of the non-secure state.

Affected products

• AMD Alveo V80 Compute Accelerator: all versions
• AMD Versal Adaptive SoC Devices: all versions
• AMD Versal AI Core Series: all versions
• AMD Versal AI Edge Series: all versions
• AMD Versal HBM Series: all versions
• AMD Versal Premium Series: all versions
• AMD Versal Prime Series: all versions
• AMD Versal RF Series: all versions

References

• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8020.html

Get alerted when CVE-2025-54515 or the next vulnerability affects your stack