Pci Express Integrity And Data Encryption
Approved changes feed: RSS · Atom
cpe:2.3:a:pcisig:pci_express_integrity_and_data_encryption:-:*:*:*:*:*:*:*part: a version: - update: *
| Vendor | Pcisig (4fdd545b-6737-57c7-9fd5-0fb476b53b46) |
|---|---|
| Product | Pci Express Integrity And Data Encryption (d2cba5b0-298a-547e-b6ee-926c636dcd54) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9614 |
vulnerable | 2026-06-08 07:47:09.361502 |
CVE-2025-9614
An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on re-keying and stream flushing during device rebinding may allow stale write transactions from a previous security context to be processed in a new one. This can lead to unintended data access across trusted domains, compromising confidentiality and integrity.
Published: 2025-12-09T18:48:36.950Z
Updated: 2025-12-10T20:09:20.429Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9613 |
vulnerable | 2026-06-08 07:47:09.360869 |
CVE-2025-9613
A vulnerability was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on tag reuse after completion timeouts may allow multiple outstanding Non-Posted Requests to share the same tag. This tag aliasing condition can result in completions being delivered to the wrong security context, potentially compromising data integrity and confidentiality.
Published: 2025-12-09T18:52:02.956Z
Updated: 2025-12-10T17:04:11.448Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9612 |
vulnerable | 2026-06-08 07:47:09.360276 |
CVE-2025-9612
An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on Transaction Layer Packet (TLP) ordering and tag uniqueness may allow encrypted packets to be replayed or reordered without detection. This can enable local or physical attackers on the PCIe bus to violate data integrity protections.
Published: 2025-12-09T18:44:59.620Z
Updated: 2025-12-11T14:57:09.949Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.