CyberRota Analysis
AI-GeneratedAMD Zynq™ UltraScale+ MPSoC and RFSoC devices are vulnerable due to insufficient boundary validation in their USB boot mode, which may allow unbounded Device Firmware Upgrade (DFU) requests to overflow the DDR receive buffer into critical memory areas. This vulnerability could lead to unauthorized code execution during the boot process, compromising the confidentiality, integrity, and availability of the system. Organizations using these devices should prioritize remediation to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade (DFU) download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution during the boot process. This issue could impact the confidentiality, integrity, or availability of affected system.