CVE-2025-24495

Published May 13, 2025

Last updated 5 days ago

Intel Core Ultra Processors

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-24495 involves an incorrect initialization of resources within the branch prediction unit of certain Intel Core Ultra Processors. This vulnerability could allow a user with local access and authentication to potentially enable information disclosure. The vulnerability stems from improper handling during the initialization phase, which can be exploited by an authenticated user. Successful exploitation could lead to the disclosure of sensitive information.

Description: Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core™ Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access.
Source: secure@intel.com
NVD status: Awaiting Analysis

Risk scores

CVSS 4.0

Type: Secondary
Base score: 6.8
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: MEDIUM

CVSS 3.1

Type: Secondary
Base score: 5.6
Impact score: 4
Exploitability score: 1.1
Vector string: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Severity: MEDIUM

Hype score: Not currently trending

References