PT-2026-7287 · Intel · Tdx Module

Published 2026-02-10 · Updated 2026-02-10 · CVE-2025-22885

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions TDX Module (affected versions not specified)

Description An issue exists in the firmware of the TDX Module related to improper buffer restrictions. A system software adversary with privileged user access and a high complexity attack may be able to escalate privileges. This could occur via local access without special internal knowledge or user interaction. The issue may impact the confidentiality of the vulnerable system, with a low impact on integrity and no impact on availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2025-22885

Affected Products

Tdx Module

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-22885 · Security Note
• https://twitter.com/CVEnew/status/2021279090381148185 · Twitter Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01314.html · Note