This vulnerability arises from improper buffer restrictions in the TDX Module firmware, enabling escalation of privilege by a system software adversary who already has privileged user access. The attack requires local access and is of high complexity but does not require user interaction or special internal knowledge. The CVSS 4.0 base score is 5.6 (medium severity), reflecting high confidentiality impact, low integrity impact, and no availability impact. No official patch or remediation details are available at this time.

An attacker with privileged user access on the local system could exploit this vulnerability to escalate privileges further, potentially compromising system confidentiality to a high degree and integrity to a low degree. Availability is not affected. There are no known exploits in the wild, indicating limited current active threat.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, limit privileged user access and monitor for unusual activity consistent with privilege escalation attempts. No vendor advisory or patch links are currently provided.