Intel Reference Platform UEFI PdaSmm toctou

Summaryinfo

A vulnerability marked as problematic has been reported in Intel Reference Platform. This impacts an unknown function of the component UEFI PdaSmm Module. The manipulation leads to toctou. This vulnerability is traded as CVE-2025-22850. An attack has to be approached locally. There is no exploit available.

Detailsinfo

A vulnerability was found in Intel Reference Platform (the affected version is unknown) and classified as problematic. This issue affects an unknown code of the component UEFI PdaSmm Module. The manipulation with an unknown input leads to a toctou vulnerability. Using CWE to declare the problem leads to CWE-367. The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state. Impacted is confidentiality. The summary by CVE is:

Time-of-check time-of-use race condition in the UEFI PdaSmm module for some Intel(R) reference platforms may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

The advisory is shared at intel.com. The identification of this vulnerability is CVE-2025-22850 since 01/09/2025. The exploitation is known to be difficult. An attack has to be approached locally. Additional levels of successful authentication are needed for exploitation. Neither technical details nor an exploit are publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• Intel

Name

• Reference Platform

License

• commercial

Website

• Vendor: https://www.intel.com/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion