Vulnerability · Published Dec 9, 2025 · Assigned by certcc
CVE-2025-9614CVE-2025-9614
Medium 6.5
In plain English
A medium-severity security flaw in PCI Express Integrity and Data Encryption (PCIe IDE) Specification from PCI-SIG. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).
Official description
An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on re-keying and stream flushing during device rebinding may allow stale write transactions from a previous security context to be processed in a new one. This can lead to unintended data access across trusted domains, compromising confidentiality and integrity.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| PCI-SIG | PCI Express Integrity and Data Encryption (PCIe IDE) Specification | 0 – before 6.5-Rev7.0 |
| PCI-SIG | PCI Express Integrity and Data Encryption (PCIe IDE) Specification | 0 – before 7.1-Rev7.0 |