PT-2026-70360 · Amd · Vitis Embedded Single File Download
CVE-2025-0041
·
Published
2026-08-11
·
Updated
2026-08-12
CVSS v4.0
4.6
Medium
| Vector | AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
Vitis Embedded Single File Download (SFD) (affected versions not specified)
Description
Uncontrolled search paths in the local Windows installation of the Vitis Embedded Single File Download (SFD) may allow a low-privileged user to achieve arbitrary code execution. This occurs when the application searches for files in an insecure or unpredictable order, potentially loading a malicious file placed by an attacker.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Uncontrolled Search Path Element
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Vitis Embedded Single File Download