cve.bz

CWE-1190: DMA Device Enabled Too Early in Boot Phase

Filter

The product enables a Direct Memory Access (DMA) capable device before the security configuration settings are established, which allows an attacker to extract data from or gain privileges on the product.

What the weakness is: CWE-1190 at MITRE. All weaknesses

Related attack patterns (CAPEC): 1
  • CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels Likelihood: High · Severity: Medium

The attack patterns MITRE's CAPEC relates to CWE-1190, as MITRE names them. Credits.

Ask an AI about CWE-1190

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1190: DMA Device Enabled Too Early in Boot Phase and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1190.html and https://cve.bz/cve/cwe/1190?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2026-28653EPSS 0.10%

    In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exp…

  2. 7.2CVE-2022-22566EPSS 0.3%

    Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute a…