Out-of-Bounds Read Vulnerability in TDX Module by Intel

CVE-2025-32007

What is CVE-2025-32007?

The TDX module prior to version 1.5.24 from Intel is susceptible to an out-of-bounds read vulnerability. This flaw may allow authorized adversaries with privileged access to extract sensitive information with minimal complexity and no specialized internal knowledge. Such an attack could be executed locally, increasing the risk of data exposure without requiring user interaction. This vulnerability primarily threatens the confidentiality of the system, potentially leading to unauthorized data visibility.

References