AMD Xilinx Run Time Xrt vulnerabilities

5 CVEs affecting AMD Xilinx Run Time Xrt, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-52538, published 2025-11-24.

More from AMD.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-0003, published 2025-11-24. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availability
• CVE-2025-52538, published 2025-11-24. High severity, CVSS 8.0. EPSS: 0.1% chance of exploitation in the next 30 days. Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in loss of confidentiality or availability.
• CVE-2025-52539, published 2025-11-24. High severity, CVSS 7.3. EPSS: 0.1% chance of exploitation in the next 30 days. A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface (AXI), potentially resulting in loss of confidentiality,…
• CVE-2025-0005, published 2025-11-24. High severity, CVSS 7.3. EPSS: 0.1% chance of exploitation in the next 30 days. Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in crash or denial of service.
• CVE-2025-0007, published 2025-11-24. Medium severity, CVSS 5.7. EPSS: 0.1% chance of exploitation in the next 30 days. Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate privileges from user space to kernel space, potentially compromising confidentiality, integrity,…