CVE-2025-52538: Integer Overflow
Published Nov 24, 2025
·Updated
Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in loss of confidentiality or availability.
Affected Software
1 affected component
AMD Xilinx Runtime (XRT)
Event History
Nov 24, 2025
CVE Published
via MITRE·08:38 PM
Data Sourced
via MITRE·08:38 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Can this be exploited remotely?
The attack vector is local, so an attacker needs local access to the affected system. The provided data does not indicate a network-based exploitation path.
2
Does exploitation require privileges or user interaction?
No privileges are required and no user interaction is required, according to the CVSS vector. A local attacker can attempt exploitation without relying on another user to take an action.