cve.bz

CWE-1222: Insufficient Granularity of Address Regions Protected by Register Locks

Filter

The product defines a large address region protected from modification by the same register lock control bit. This results in a conflict between the functional requirement that some addresses need to be writable by software during operation and the security requirement that the system configuration lock bit must be set during the boot process.

What the weakness is: CWE-1222 at MITRE. All weaknesses

Related attack patterns (CAPEC): 1
  • CAPEC-679 Exploitation of Improperly Configured or Implemented Memory Protections Likelihood: Medium · Severity: Very High

The attack patterns MITRE's CAPEC relates to CWE-1222, as MITRE names them. Credits.

Ask an AI about CWE-1222

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1222: Insufficient Granularity of Address Regions Protected by Register Locks and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1222.html and https://cve.bz/cve/cwe/1222?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2025-21283EPSS 1.5%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability