AMD Vitis Embedded Single File Download Sfd For Windows vulnerabilities

2 CVEs affecting AMD Vitis Embedded Single File Download Sfd For Windows, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-61970, published 2026-08-11.

More from AMD.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-0041, published 2026-08-11. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Uncontrolled search paths in the Vitis™ Embedded Single File Download (SFD) for local Windows installation could allow a low-privileged user to create arbitrary code execution.
• CVE-2025-61970, published 2026-08-11. Low severity, CVSS 1.0. EPSS: 0.1% chance of exploitation in the next 30 days. Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking.