CVE-2025-61970:详情

CVE-2025-61970

2026-08-11
17h17 +00:00
A01-Broken Access Control
2026-09-29
11h10 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-276 Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
CWE-732 Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

参考资料