# CVE-2025-0043: AMD Vivado Lab Solutions privilege escalation via directory permissions

Source: https://junglewise.ai/threats/cve-2025-0043-incorrect-directory-permissions-within-amd-vivado-lab-solutions  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-12. Updated: 2026-11-12  
License: CC BY 4.0 with a link back

CVE-2025-0043 · Severity: info · Published 2026-11-12

AMD Vivado Lab Solutions, a hardware design tool suite, contains incorrect file system permissions that allow local users to escalate their privileges to higher levels of access. An attacker with a standard user account could exploit this to run arbitrary code with elevated permissions, potentially compromising the entire system.

Vendors: [Amd](https://junglewise.ai/threats/vendors/amd).

## Quick answers

**Is CVE-2025-0043 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-0043 being exploited in the wild.

**How severe is CVE-2025-0043?** Informational severity, published 12 November 2026.

**Which products and versions are affected?** AMD Vivado Lab Solutions.

**Is there a fix for CVE-2025-0043?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-0043 attacked?** It is attacked with local access.

**Am I affected by CVE-2025-0043?** Check whether you run Amd Vivado Lab Solutions. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability stems from improper directory permissions within Vivado Lab Solutions that fail to restrict access appropriately. A local user-privileged attacker can leverage these weak permissions to escalate privileges and achieve arbitrary code execution on the affected system.

## Affected products

- AMD Vivado Lab Solutions

## Timeline

- 2026-11-12: disclosed

## References

- [https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8024.html](https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8024.html)