cve.bz

CWE-1264: Hardware Logic with Insecure De-Synchronization between Control and Data Channels

Filter

The hardware logic for error handling and security checks can incorrectly forward data before the security check is complete.

What the weakness is: CWE-1264 at MITRE. All weaknesses

Related attack patterns (CAPEC): 2
  • CAPEC-233 Privilege Escalation
  • CAPEC-663 Exploitation of Transient Instruction Execution Likelihood: Low · Severity: Very High

The attack patterns MITRE's CAPEC relates to CWE-1264, as MITRE names them. Credits.

Ask an AI about CWE-1264

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1264: Hardware Logic with Insecure De-Synchronization between Control and Data Channels and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1264.html and https://cve.bz/cve/cwe/1264?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 3.3CVE-2026-112558EPSS 0.1%

    A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.

  2. 7.5CVE-2024-21823EPSS 0.2%

    Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation Xeon(R) processors may allow an authorized user to potentially enable escalation of privilege local access

  3. 7.5CVE-2022-41588EPSS 0.4%

    The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity.