CVE-2025-12896 describes an improper resource management vulnerability in the firmware of certain Solidigm DC Products. This flaw could allow a local or physically present attacker to bypass security measures and gain unauthorized access to a locked storage device. Rated as Medium severity (CVSS 4.4), the vulnerability requires high privileges and local access, but successful exploitation could lead to high confidentiality impact. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Solidigm™ | D5-P5316, D7-P5510, D7-P5520/D7-P5620, D5-P5430, D5-P5336 | All FW prior to 5CV10326, All FW prior to 6DV10341 (8K IU) / 6CV10241 (4K IU), All FW prior to 9CV10490, All FW prior to ACV10360, All FW prior to JCV10501CNA affecteddefault unaffected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.