CVE-2025-6573 describes a critical vulnerability where kernel software operating within an untrusted execution environment (REE) can exfiltrate sensitive data from the trusted execution environment (TEE). This flaw carries a CVSS score of 9.8 (CRITICAL), indicating a network-exploitable vulnerability with low attack complexity, requiring no user interaction, and potentially leading to complete compromise of confidentiality, integrity, and availability. While no specific affected products are listed, the vulnerability is not currently listed in CISA's KEV catalog, nor is there public exploit code available in Metasploit, Nuclei, or ExploitDB. Despite the lack of active exploitation, the CVE has garnered significant community attention with 10 mentions, suggesting awareness and potential future interest.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Imagination Technologies | Graphics DDK | >= 23.2 RTM, <= 24.3 RTM, 1.15 RTM, 1.17 RTM, 1.18 RTMCNA affecteddefault unknown |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.