Main Vulnerability Database Vulnerabilities #VU114442

Input validation error in Intel SGX SDK for Linux and Intel SGX SDK for Windows - CVE-2025-32004

Published: August 26, 2025

Vulnerability identifier: #VU114442

CSH Severity: Low

CVSS v4: 1.8 [CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N]

CVE-ID: CVE-2025-32004

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insufficient validation of user-supplied input in the Intel Edger8r Tool. A local administrator can pass specially crafted input to the application and gain elevated privileges on the target system.

Affected software

Intel SGX SDK for Linux
Intel SGX SDK for Windows

How to mitigate CVE-2025-32004

Install updates from vendor's website.

External References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01383.html

Related Security Bulletins