CVE-2025-0007

Medium · 5.7

CVSS

5.7

EPSS

0.1%

Published

Nov 24, 2025

CISA due date

—

The record

Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate privileges from user space to kernel space, potentially compromising confidentiality, integrity, and/or availability.

Affected packages

Ecosystem	Package	Introduced	Fixed