CVE-2025-47389

CVE-2025-47389 is a memory corruption vulnerability affecting attestation report generation functionality, arising from an integer overflow condition that causes buffer copy operations to fail improperly. The vulnerability requires local access with low-level user privileges to exploit, but carries high severity with potential for complete compromise of confidentiality, integrity, and availability on affected systems (CVSS 7.8). The attack vector is local with low complexity, making exploitation relatively straightforward once an attacker gains initial system access. Regarding exploitation status, this vulnerability is not currently being exploited in the wild, has not been added to the KEV catalogue, and shows minimal community attention with an EPSS score of 0.000060 indicating rare overall CVE prevalence. While not an immediate active threat, the moderate FAUCET risk score of 49.0 suggests organizations should prioritize patching during regular maintenance cycles.