CVE-2022-23822: Xilinx Zynq-7000 Firmware

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In this physical attack, an attacker may potentially exploit the Zynq-7000 SoC First Stage Boot Loader (FSBL) by bypassing authentication and loading a malicious image onto the device. This in turn may further allow the attacker to perform additional attacks such as such as using the device as a decryption oracle. An anticipated mitigation via a 2022.1 patch will resolve the issue.

Affected products

• Xilinx Zynq-7000 Firmware: before 2022.1 (fixed in 2022.1)
• Xilinx Zynq-7000s Firmware: before 2022.1 (fixed in 2022.1)

Published 2022-04-27. Last modified 2026-06-17.