Log in Start free

Vulnerability · Published Nov 23, 2025 · Assigned by AMD

CVE-2025-54515

Low 1.0

In plain English

A low-severity security flaw in Alveo™ V80 Compute Accelerator from AMD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).

Severity (CVSS 4.0)1.0Low
Exploit odds (30 days)0.1%top 97.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

The Secure Flag passed to Versal™ Adaptive SoC’s Trusted Firmware for Cortex®-A processors (TF-A) for Arm’s Power State Coordination Interface (PSCI) commands were incorrectly set to secure instead of using the processor’s actual security state. This would allow the PSCI requests to appear they were from processors in the secure state instead of the non-secure state.

Affected products (as reported)

VendorProductVersions
AMD Versal™ Adaptive SoC Devices see references
AMD Versal™ RF Series see references
AMD Versal™ AI Edge Series see references
AMD Versal™ Prime Series see references
AMD Versal™ Premium Series see references
AMD Versal™ AI Core Series see references
AMD Versal™ HBM Series see references
AMD Alveo™ V80 Compute Accelerator see references

Weakness: CWE-1284 · Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References