CVE-2025-0041
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
Uncontrolled search paths in Vitis Embedded Single File Download (SFD) for local Windows installation could allow a low-privileged user to execute arbitrary code. The vulnerability stems from improper path management, potentially leading to malicious code execution.
Risk Assessment
Risk of arbitrary code execution by a low-privileged user, potentially leading to system compromise or malware installation. Requires local access to the system.
Recommendation
Update Vitis SFD to the latest patched version. Restrict local user privileges and apply the principle of least privilege.
Original NVD description (English source)
Uncontrolled search paths in the Vitis™ Embedded Single File Download (SFD) for local Windows installation could allow a low-privileged user to create arbitrary code execution.