CVE-2025-9709: New CVE documents major vulnerability in common chip

CVE-2025-9709: New CVE documents major vulnerability in common chip

Toreon is one of the few Belgian CNA’s (CVE Numbering Authority) and in that capacity we are capable of officially assigning CVE ID’s to new vulnerabilities that are discovered by our own team or by the growing number of professional researchers that are constantly on the hunt for them. Toreon can therefore disclose the vulnerabilities it uncovers in a formal, standardized way. Publishing CVE Records makes it easier for the broader cybersecurity community to track issues, respond quickly, and coordinate fixes across ecosystems.

CVE-2025-9709

This is the latest of such publications and the contribution by one of the researchers in our network: CVE-2025-9709, which discusses discovered vulnerabilities in a widely used chip. The bypass can be exploited by using electromagnetic signals that is also effective when the system is working normally, not only during the start-up process. It shows devices can be extremely vulnerable, certainly when physical access is possible. By exploiting this vulnerability, a hacker could get access to sensitive data or could gain control over the device. Another call to action for digital device makers to put enough procedures in place to ensure full security of their designs. Thanks to Milena Mangiola for this extensive, well-done research.

Leave your details and get instant access to the full PDF

Toreon has been authorized by the CVE Program as a CVE Numbering Authority (CNA)

Toreon has been officially authorized by the CVE Program as a CVE Numbering Authority (CNA). This designation allows Toreon to assign official CVE identifiers (CVE IDs) to vulnerabilities discovered by or reported to Toreon that are not in another CNA’s scope.

Did this article leave you with any questions?

toreon

Start typing and press Enter to search

Shopping Cart