AMD Xilinx Run Time (XRT)

• CVE-2025-52538 High 8.0 Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in loss of confidentiality or availability. 0.1%
• CVE-2025-0003 High 7.3 Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availability 0.2%
• CVE-2025-0007 Medium 5.7 Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate privileges from user space to kernel space, potentially compromising confidentiality, integrity, and/o 0.1%
• CVE-2025-0005 High 7.3 Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in crash or denial of service. 0.1%
• CVE-2025-52539 High 7.3 A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface (AXI), potentially resulting in loss of confidentiality, in 0.1%