Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2025-29946
Medium · 4.5
CWE-1301 Feb 10, 2026
Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't…
Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory.
CVE-2025-12216
Medium · 5.5
CWE-1301 Oct 25, 2025
Malicious / Malformed App can be Installed but not Uninstalled
Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.