{"id":"CVE-2025-9614","aliases":["EUVD-2025-202313","GHSA-mwxr-7r8x-6fhx"],"status":"published","title":"CVE-2025-9614","description":"An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on re-keying and stream flushing during device rebinding may allow stale write transactions from a previous security context to be processed in a new one. This can lead to unintended data access across trusted domains, compromising confidentiality and integrity.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.0013,"percentile":0.02666,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2025-12-09T18:48:36Z","modified":"2026-10-14T21:10:00Z","products":[{"vendor":"pci-sig","product":"pci express integrity and data encryption (pcie ide) specification"},{"vendor":"pcisig","product":"pci_express_integrity_and_data_encryption"}],"references":[{"url":"https://pcisig.com/specifications","tags":["Product"]},{"url":"https://pcisig.com/PCIeIDEStandardVulnerabilities","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9614"},{"url":"https://github.com/advisories/GHSA-mwxr-7r8x-6fhx"}],"sources":{"cve":[{"id":"CVE-2025-9614","title":"CVE-2025-9614","description":"An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on re-keying and stream flushing during device rebinding may allow stale write transactions from a previous security context to be processed in a new one. This can lead to unintended data access across trusted domains, compromising confidentiality and integrity.","status":"published","published":"2025-12-09T18:48:36.95Z","modified":"2025-12-10T20:09:20.429Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:32:33.755525Z"}],"euvd":[{"id":"EUVD-2025-202313","description":"An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on re-keying and stream flushing during device rebinding may allow stale write transactions from a previous security context to be processed in a new one. This can lead to unintended data access across trusted domains, compromising confidentiality and integrity.","status":"published","published":"2025-12-09T18:48:36Z","modified":"2025-12-10T20:09:20Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:49:07.060478Z"}],"ghsa":[{"id":"GHSA-mwxr-7r8x-6fhx","title":"An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE)...","description":"An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on re-keying and stream flushing during device rebinding may allow stale write transactions from a previous security context to be processed in a new one. This can lead to unintended data access across trusted domains, compromising confidentiality and integrity.","status":"published","published":"2025-12-09T21:31:48Z","modified":"2025-12-10T21:32:37Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:05:08.652625Z"}],"nvd":[{"id":"CVE-2025-9614","description":"An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on re-keying and stream flushing during device rebinding may allow stale write transactions from a previous security context to be processed in a new one. This can lead to unintended data access across trusted domains, compromising confidentiality and integrity.","status":"published","published":"2025-12-09T19:15:50.943Z","modified":"2026-10-14T21:10:00.183Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"updated_at":"2026-11-02T14:11:49.468427Z"}]}}