What the vulnerability does
01Description
Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment (TEE) driver, potentially leading to loss of confidentiality.
CVSS base score
2.8/10
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N
Key dates
02Disclosure timeline
September 6, 2025
CVE published
September 8, 2025
Record updated
External resources
