---
id: "CVE-2025-0043"
page: "https://infrastack.ai/live/CVE-2025-0043"
kind: "vulnerability"
aliases: ["CVE-2025-0043"]
title: "AMD Vivado Lab Solutions on Windows: install folder lets any signed-in user replace xcd.exe and escalate privileges"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "vendor"
products: [{"name": "Vivado Lab Solutions", "fixed": ["2026.1"], "affected": "< 2026.1 (Windows; 2024.1 named in bulletin, other earlier versions not enumerated)", "ecosystem": "vendor"}]
ecosystems: []
tags: ["amd", "fpga", "linux", "local-privilege-escalation", "vendor", "vivado-lab", "windows"]
not_affected_if: ["linux", "no-vivado-lab-installed", "single-user-machine", "vivado-lab-not-installed"]
published_at: "2026-11-12T20:18:13+00:00"
first_seen_at: "2026-11-12T20:40:22+00:00"
updated_at: "2026-11-12T20:45:44+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0043", "first_seen_at": "2026-11-12T20:40:22+00:00"}, {"source": "analyst", "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8024.html", "first_seen_at": "2026-11-12T20:45:44+00:00", "cites": ["https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8024.html"]}]
exploit_sources: []
---

# AMD Vivado Lab Solutions on Windows: install folder lets any signed-in user replace xcd.exe and escalate privileges

Link for people: https://infrastack.ai/live/CVE-2025-0043 (this .md is for agents)

AMD-SB-8024: after installing Vivado Lab Solutions on Windows, the install path has wrong permissions. The binary bin\unwrapped\win64.o\xcd.exe (seen in the 2024.1 install) can be modified by all users in the Authenticated Users group, so a low-privileged local user can replace it and gain higher privileges and run code. CVSS 4.0 7.0. AMD lists the fix as Vivado Lab Solutions 2026.1 (released 2026-06-23). No exploitation or PoC mentioned.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Vivado Lab Solutions affected < 2026.1 (Windows; 2024.1 named in bulletin, other earlier versions not enumerated) fixed 2026.1

## How to check

Windows only. Check whether Vivado Lab Solutions is installed (e.g. C:\Xilinx\Vivado_Lab\<version>) and the version is older than 2026.1. Run: icacls C:\Xilinx\Vivado_Lab\<version>\bin\unwrapped\win64.o\xcd.exe. If Authenticated Users (or Users/Everyone) has Modify/Write/Full, you are exposed.

## Fix

Upgrade Vivado Lab Solutions to 2026.1 or later (AMD mitigation release, 2026-06-23).

## Timeline

- 2026-11-12T20:40:22+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2025-0043
- 2026-11-12T20:45:44+00:00 analyst https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8024.html — Read AMD-SB-8024 (primary). Windows-only; Linux tag from triage not supported by bulletin. Affected range below 2026.1 is inferred from mitigation release; only 2024.1 path is named. No exploitation/PoC found; no social search done (low-profile local LPE).

## Documents

- [advisory] AMD-SB-8024 Vivado Lab Solutions Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8024.html

## From the sources

Incorrect directory permissions within AMD Vivado™ Lab Solutions could allow a local user-privileged attacker to escalate their privileges, potentially resulting in arbitrary code execution.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_