Unquoted Search Path or Element in SoC Thermal IPF Extension Provider software - CVE-2025-32449

Vulnerability identifier: #VU119136

CSH Severity: Low

CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-32449

CWE-ID: CWE-428

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to uncontrolled search path element. A local user can gain elevated privileges on the target system.

SoC Thermal IPF Extension Provider software
ThinkEdge SE30
ThinkPad 11e Yoga Gen 6 20SE
ThinkPad 11e Yoga Gen 6 20SF
ThinkPad L13 20R3
ThinkPad L13 20R4
ThinkPad L13 Yoga 20R5
ThinkPad L13 Yoga 20R6
ThinkPad L390 20NR
ThinkPad L390 20NS
ThinkPad L390 Yoga 20NT
ThinkPad L390 Yoga 20NU
Intel DPTF driver for Windows IoT 10 64-bit (version 1809) - ThinkEdge SE30
Intel Dynamic Platform and Thermal Framework Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad Yoga 11e Yoga 6th Gen (Types 20SE, 20SF)
Intel Dynamic Platform and Thermal Framework for Windows 10 (Version 1803 or later) - ThinkPad L13, L13 Yoga
Intel Dynamic Platform and Thermal Framework for Windows 10 (Version 1809 or later) - ThinkPad L390 (20NR, 20NS), L390 Yoga (20NT, 20NU)

Install updates from vendor's website.

SoC Thermal IPF Extension Provider software - update to 03.03.1002

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01394.html

• Unquoted Search Path or Element in Intel SoC Thermal IPF Extension Provider
• Privilege escalation in Intel DPTF driver for Windows IoT 10 for Lenovo products