CVE-2025-48505
LowCVSS 1.0Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution.
Risk Assessment
The risk includes potential privilege escalation by an unauthorized user, leading to full system compromise.
Recommendation
Fix permissions on the Vitis™ Unified installation path and enforce least privilege principle.
Other vulnerabilities in Vitis Unified
See all- CVE-2025-61970Low
Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking.
- CVE-2025-48506Medium
Uncontrolled search paths in Vitis Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution.
Original NVD description (English source)
Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS