CVE-2025-61970
LowCVSS 1.0Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking.
Risk Assessment
The risk includes potential takeover of the application by an unauthorized user, leading to execution of malicious code.
Recommendation
Fix permissions on the Vitis™ Unified installation path and restrict access to installation directories.
Other vulnerabilities in Vitis Unified
See all- CVE-2025-48506Medium
Uncontrolled search paths in Vitis Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution.
- CVE-2025-48505Low
Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution.
Original NVD description (English source)
Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS