Time-of-Check Time-of-Use Race Condition in ACAT by Intel

CVE-2025-27725

What is CVE-2025-27725?

A vulnerability exists in Intel's ACAT software products prior to version 3.13, allowing an unprivileged software adversary with authenticated user access to potentially exploit a time-of-check time-of-use race condition. Successful execution of this complex attack may lead to a denial of service condition, necessitating active user interaction. This localized access vulnerability could impact availability, while maintaining confidentiality and integrity. Users are advised to upgrade to the latest version to mitigate risks.

References