CVE-2025-25176
CRITICALCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Lifecycle Timeline
2Description
Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in the non-secure environment of a platform.
Analysis
A hardware vulnerability allows exfiltration of intermediate register values from secure workloads running in ARM TrustZone or similar TEE environments. Non-secure applications can read secure-world register contents.
Technical Context
Intermediate register values from secure workloads are accessible from the non-secure environment (CWE-668). This breaks the fundamental security guarantee of Trusted Execution Environments where secure-world data should be inaccessible from normal-world code.
Affected Products
See vendor advisory for affected processors
Remediation
Apply processor firmware/microcode updates from the vendor.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today