CVE-2025-48506

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-48506", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "state": "PUBLISHED", "assignerShortName": "AMD", "dateReserved": "2025-05-22T16:34:02.896Z", "datePublished": "2026-08-11T17:02:43.719Z", "dateUpdated": "2026-08-12T13:15:21.897Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2026-08-11T17:02:43.719Z"}, "affected": [{"defaultStatus": "affected", "vendor": "AMD", "product": "Vitis\u2122 Unified Installer for FPGAs & Adaptive SoCs in Windows", "versions": [{"version": "2026.1", "status": "unaffected"}]}], "datePublic": "2026-08-11T17:02:17.208Z", "descriptions": [{"lang": "en", "value": "Uncontrolled search paths in Vitis\u2122 Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution.", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Uncontrolled search paths in Vitis\u2122 Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution.<br>"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Security Vulnerability"}]}], "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8015.html"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "AMD PSIRT Automation 1.0"}, "metrics": [{"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L", "attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "ACTIVE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnAvailabilityImpact": "LOW", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "subAvailabilityImpact": "LOW", "baseScore": 7.3, "baseSeverity": "HIGH"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-427", "lang": "en", "description": "CWE-427 Uncontrolled Search Path Element"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-12T13:15:02.203167Z", "id": "CVE-2025-48506", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-12T13:15:21.897Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-48506", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-12T13:15:02.203167Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-427", "description": "CWE-427 Uncontrolled Search Path Element"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-12T13:15:18.197Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 7.3, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "LOW", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "LOW", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "AMD", "product": "Vitis\u2122 Unified Installer for FPGAs & Adaptive SoCs in Windows", "versions": [{"status": "unaffected", "version": "2026.1"}], "defaultStatus": "affected"}], "datePublic": "2026-08-11T17:02:17.208Z", "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8015.html"}], "x_generator": {"engine": "AMD PSIRT Automation 1.0"}, "descriptions": [{"lang": "en", "value": "Uncontrolled search paths in Vitis\u2122 Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution.", "supportingMedia": [{"type": "text/html", "value": "Uncontrolled search paths in Vitis\u2122 Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Security Vulnerability"}]}], "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2026-08-11T17:02:43.719Z"}}}, "cveMetadata": {"cveId": "CVE-2025-48506", "state": "PUBLISHED", "dateUpdated": "2026-08-12T13:15:21.897Z", "dateReserved": "2025-05-22T16:34:02.896Z", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "datePublished": "2026-08-11T17:02:43.719Z", "assignerShortName": "AMD"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "product": "Vitis\u2122 Unified Installer for FPGAs & Adaptive SoCs in Windows", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "2026.1"}]}], "source": "psirt@amd.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Uncontrolled search paths in Vitis\u2122 Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution."}, {"lang": "es", "value": "Rutas de b\u00fasqueda no controladas en la ruta de instalaci\u00f3n unificada de Vitis\u2122 en m\u00e1quinas Windows locales podr\u00edan permitir la inyecci\u00f3n de DLL en estas rutas de instalaci\u00f3n, lo que podr\u00eda resultar en ejecuci\u00f3n de c\u00f3digo arbitrario."}], "id": "CVE-2025-48506", "lastModified": "2026-09-29T11:10:00.150", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 4.6, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "psirt@amd.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-48506", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-12T13:15:02.203167Z", "version": "2.0.3"}}]}, "published": "2026-08-11T17:17:44.200", "references": [{"source": "psirt@amd.com", "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8015.html"}], "sourceIdentifier": "psirt@amd.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-427"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "2026.1"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Vitis\u2122 Unified Installer for FPGAs & Adaptive SoCs in Windows", "source": "cna", "vendor": "AMD"}, "product": "vitis_unified_installer", "vendor": "amd"}], "created": "2026-08-12T21:00:04.085821+00:00", "updated": "2026-08-13T09:54:07.996780+00:00", "vendors": ["amd", "amd$PRODUCT$vitis_unified_installer"]}