CVE-2025-48507
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-48507
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the ability to turn on and off subsystems within the SOC.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
CWE-1284
Source: NVD (National Vulnerability Database)
Vulnerability Title
AMD Zynq UltraScale+ 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AMD Zynq UltraScale+是美国超威半导体（AMD）公司的一款多处理器系统芯片。 AMD Zynq UltraScale+存在安全漏洞，该漏洞源于未使用调用处理器的安全状态，可能导致非安全处理器访问安全内存或加密操作。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| AMD | Kria™ SOM | Version TBD | - | |
| AMD | Zynq™ UltraScale+™ MPSoCs | Version TBD | - | |
| AMD | Zynq™ UltraScale+™ RFSoCs | Version TBD | - |
II. Public POCs for CVE-2025-48507
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Proof of Concept of CVE-2025-48507. The security flaw can be leveraged by Non-Secure software (e.g., Linux) to break Trust Zone and gain access to Secure world | https://github.com/jdbonfils/PoC_CVE-2025-48507 | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-48507
请登录查看更多情报信息。
Same Patch Batch · AMD · 2025-11-23 · 4 CVEs total
| CVE-2024-21923 | 7.3 HIGH | AMD StoreMI 安全漏洞 |
| CVE-2024-21922 | 7.3 HIGH | AMD StoreMI 安全漏洞 |
| CVE-2025-54515 | AMD Versal Adaptive SoC 安全漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-1284
- CVE-2026-25863
Conditional Fields for Contact Form 7 < 2.7.3 DoS via Uncont - CVE-2025-14688
IBM® Db2® is vulnerable to a denial of service when fetching - CVE-2026-6915
Flaw in the updateUser Command May Allow Unauthorized Config - CVE-2026-1352
IBM® Db2® is vulnerable to a trap or return SQLCODE -901 whe - CVE-2026-6839
ONE 安全漏洞
V. Comments for CVE-2025-48507
No comments yet