CVE-2025-31356

Insufficient verification of data authenticity for some Intel(R) Trust Domain Extensions (Intel(R) TDX) within Ring 0: Hypervisor may allow an information disclosure. A system software adversary with a privileged user access combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without any user interaction. The potential vulnerability may impact the confidentiality (high), integrity (low) and no effect on availability. Subsequent system impacts include reduced confidentiality (low), integrity (low), and no effect on availability.

CVSS

No CVSS.

References

Link	Resource
https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01419.html

Configurations

No configuration.

History

29 Sep 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) Verificación insuficiente de la autenticidad de los datos para algunas Extensiones de Dominio de Confianza Intel(R) (Intel(R) TDX) dentro del Anillo 0: Hipervisor puede permitir una revelación de información. Un adversario de software de sistema con acceso de usuario privilegiado combinado con un ataque de alta complejidad puede permitir la exposición de datos. Este resultado puede ocurrir potencialmente a través de acceso local cuando los requisitos de ataque están presentes sin ninguna interacción del usuario. La vulnerabilidad potencial puede impactar la confidencialidad (alta), la integridad (baja) y ningún efecto en la disponibilidad. Los impactos subsiguientes en el sistema incluyen confidencialidad reducida (baja), integridad (baja) y ningún efecto en la disponibilidad.

Information

Published : 2026-08-11 17:17

Updated : 2026-09-29 11:10

NVD link : CVE-2025-31356

Mitre link : CVE-2025-31356

CVE.ORG link : CVE-2025-31356

JSON object : View

Products Affected

No product.

CWE

CWE-345

Insufficient Verification of Data Authenticity

{"id": "CVE-2025-31356", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-31356", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-12T13:38:11.335053Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "secure@intel.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.7, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "privilegesRequired": "HIGH", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "secure@intel.com", "affectedData": [{"vendor": "n/a", "product": "Intel(R) Trust Domain Extensions (Intel(R) TDX)", "versions": [{"status": "affected", "version": "See references"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-11T17:17:43.360", "references": [{"url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01419.html", "source": "secure@intel.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "secure@intel.com", "description": [{"lang": "en", "value": "CWE-345"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-345"}]}], "descriptions": [{"lang": "en", "value": "Insufficient verification of data authenticity for some Intel(R) Trust Domain Extensions (Intel(R) TDX) within Ring 0: Hypervisor may allow an information disclosure. A system software adversary with a privileged user access combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without any user interaction. The potential vulnerability may impact the confidentiality (high), integrity (low) and no effect on availability. Subsequent system impacts include reduced confidentiality (low), integrity (low), and no effect on availability."}, {"lang": "es", "value": "Verificaci\u00f3n insuficiente de la autenticidad de los datos para algunas Extensiones de Dominio de Confianza Intel(R) (Intel(R) TDX) dentro del Anillo 0: Hipervisor puede permitir una revelaci\u00f3n de informaci\u00f3n. Un adversario de software de sistema con acceso de usuario privilegiado combinado con un ataque de alta complejidad puede permitir la exposici\u00f3n de datos. Este resultado puede ocurrir potencialmente a trav\u00e9s de acceso local cuando los requisitos de ataque est\u00e1n presentes sin ninguna interacci\u00f3n del usuario. La vulnerabilidad potencial puede impactar la confidencialidad (alta), la integridad (baja) y ning\u00fan efecto en la disponibilidad. Los impactos subsiguientes en el sistema incluyen confidencialidad reducida (baja), integridad (baja) y ning\u00fan efecto en la disponibilidad."}], "lastModified": "2026-09-29T11:10:00.150", "sourceIdentifier": "secure@intel.com"}