CVE-2025-48506
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
Uncontrolled search paths in Vitis Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution.
Risk Assessment
Risk of arbitrary code execution in the context of the application, potentially leading to full system compromise.
Recommendation
Update Vitis Unified installation to the latest version with security fixes.
Other vulnerabilities in Vitis Unified
See all- CVE-2025-61970Low
Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking.
- CVE-2025-48505Low
Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution.
Original NVD description (English source)
Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS