CVE-2025-32007

CVE-2025-32007 is an out-of-bounds read vulnerability affecting Intel TDX modules prior to version 1.5.24, specifically within Ring 0 of the hypervisor. This medium-severity vulnerability (CVSS 4.4) allows an authorized, privileged local attacker to achieve high confidentiality impact through a low-complexity attack, potentially exposing sensitive data without user interaction. While there is no known active exploitation or public exploit code, the vulnerability has garnered some community discussion and media coverage, including an article from SecurityWeek highlighting its potential for full system compromise.