Information Disclosure Vulnerability in TDX Module by Intel
CVE-2025-32467

5.6MEDIUM

Key Information:

Vendor

Intel

Vendor
CVE Published:
10 February 2026

What is CVE-2025-32467?

An information disclosure vulnerability exists in Intel's TDX Module for versions prior to tdx1.5. This issue arises from the use of an uninitialized variable within Ring 0 of the hypervisor framework. An authorized adversary with privileged user access can exploit this vulnerability under specific conditions, enabling potential data exposure through local access without necessitating any user interaction. As a result, it poses a risk to the confidentiality of the affected systems, although the integrity and availability of the system remain unaffected. It is essential for users of the software to remain vigilant and apply recommended updates to safeguard against such vulnerabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

TDX Module before version tdx1.5

References

CVSS V4

Score:
5.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.