medium
5.5
CWE
345 657
Advisory Published
Updated

CVE-2019-5478

First published: Tue Sep 03 2019(Updated: )

A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure boot behavior.

Credit: support@hackerone.com support@hackerone.com

Affected SoftwareAffected VersionHow to fix
Xilinx Zynq Ultrascale+ Mpsoc Firmware
Xilinx Zynq Ultrascale+ Mpsoc
Xilinx Zynq Ultrascale+ Rfsoc Firmware
Xilinx Zynq Ultrascale+ Rfsoc
All of
Amd Zu11eg Firmware
AMD ZU11EG
All of
Amd Zu15eg Firmware
Amd Zu15eg
All of
Amd Zu17eg Firmware
Amd Zu17eg Firmware
All of
Amd Zu19eg Firmware
Amd Zu19eg Firmware
All of
AMD Zu1CG Firmware
AMD Zu1CG Firmware
All of
AMD ZU1EG Firmware
AMD ZU1EG Firmware
All of
Amd Zu21dr Firmware
Amd Zu21dr
All of
Amd Zu25dr Firmware
Amd Zu25dr Firmware
All of
Amd Zu27dr Firmware
Amd Zu27dr Firmware
All of
Amd Zu28dr Firmware
Amd Zu28dr Firmware
All of
Amd Zu29dr Firmware
Amd Zu29dr Firmware
All of
AMD ZU2CG Firmware
Amd Zu2cg Firmware
All of
Amd Zu2eg Firmware
Amd Zu2eg
All of
Amd Zu39dr
Amd Zu39dr Firmware
All of
Amd Zu3cg
Amd Zu3cg
All of
Amd Zu3eg Firmware
Amd Zu3eg Firmware
All of
Amd Zu3tcg
Amd Zu3tcg Firmware
All of
Amd Zu3teg
Amd Zu3teg Firmware
All of
Amd Zu42dr Firmware
Amd Zu42dr Firmware
All of
Amd Zu43dr Firmware
Amd Zu43dr Firmware
All of
Amd Zu46dr Firmware
Amd Zu46dr Firmware
All of
Amd Zu47dr Firmware
Amd Zu47dr
All of
Amd Zu48dr Firmware
Amd Zu48dr
All of
Amd Zu49dr Firmware
Amd Zu49dr Firmware
All of
Amd Zu4cg
AMD ZU4CG
All of
Amd Zu4eg
Amd Zu4eg
All of
Amd Zu4ev
Amd Zu4ev
All of
AMD ZU5CG Firmware
Amd Zu5cg Firmware
All of
Amd Zu5eg
Amd Zu5eg
All of
Amd Zu5ev Firmware
Amd Zu5ev Firmware
All of
Amd Zu63dr Firmware
Amd Zu63dr Firmware
All of
Amd Zu64dr Firmware
Amd Zu64dr
All of
Amd Zu65dr Firmware
Amd Zu65dr
All of
Amd Zu67dr Firmware
Amd Zu67dr Firmware
All of
AMD ZU6CG
Amd Zu6cg Firmware
All of
Amd Zu6eg
Amd Zu6eg Firmware
All of
AMD ZU7CG
Amd Zu7cg Firmware
All of
Amd Zu7eg
Amd Zu7eg Firmware
All of
Amd Zu7ev
Amd Zu7ev Firmware
All of
Amd Zu9cg Firmware
Amd Zu9cg Firmware
All of
Amd Zu9eg
Amd Zu9eg Firmware

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2019-5478?

    CVE-2019-5478 has been assessed as having a medium severity level due to its potential impact on secure boot functionality.

  • How do I fix CVE-2019-5478?

    To mitigate CVE-2019-5478, ensure you update to the latest firmware provided by Xilinx for Zynq UltraScale+ devices.

  • What devices are affected by CVE-2019-5478?

    CVE-2019-5478 affects Xilinx Zynq UltraScale+ and Zynq UltraScale+ RFSoC devices in Encrypt Only boot mode.

  • What risks does CVE-2019-5478 pose to my system?

    CVE-2019-5478 may allow an adversary to manipulate boot control fields, leading to improper secure boot behavior.

  • Can CVE-2019-5478 be exploited remotely?

    CVE-2019-5478 is not specifically a remote vulnerability, but it can be exploited by physical access to the affected devices.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203