CVE-2025-0034

MediumCVSS 4.7

Published: 06/09/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

2th percentile - higher than 2% of all known CVEs

Summary

Insufficient parameter sanitization in the TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_SPATIAL_PART and cause read or write past the end of allocated arrays, potentially resulting in loss of platform integrity or denial of service.

Risk Assessment

An attacker could trigger memory errors leading to loss of platform integrity or service unavailability. This may affect system stability and security.

Recommendation

Apply the TEE SOC Driver fixes provided by the vendor. Update platform firmware and software to patched versions.

Other vulnerabilities in TEE SOC Driver

CVE-2026-0428Low
Insufficient parameter sanitization in the TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS command to write invalid data to a remote Die, potentially resulting in unexpected behavior.

Original NVD description (English source)

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_SPATIAL_PART and cause read or write past the end of allocated arrays, potentially resulting in a loss of platform integrity or denial of service.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS