cve.bz

CWE-1274: Improper Access Control for Volatile Memory Containing Boot Code

Filter

The product conducts a secure-boot process that transfers bootloader code from Non-Volatile Memory (NVM) into Volatile Memory (VM), but it does not have sufficient access control or other protections for the Volatile Memory.

What the weakness is: CWE-1274 at MITRE. All weaknesses

Related attack patterns (CAPEC): 2
  • CAPEC-456 Infected Memory Likelihood: Medium · Severity: High
  • CAPEC-679 Exploitation of Improperly Configured or Implemented Memory Protections Likelihood: Medium · Severity: Very High

The attack patterns MITRE's CAPEC relates to CWE-1274, as MITRE names them. Credits.

Ask an AI about CWE-1274

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1274: Improper Access Control for Volatile Memory Containing Boot Code and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1274.html and https://cve.bz/cve/cwe/1274?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 4.6CVE-2024-36345EPSS 0.1%

    Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of confidentiality.

  2. 7.1CVE-2025-29950EPSS 0.2%

    Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.

  3. 6.1CVE-2025-65396EPSS 0.2%

    A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot mechanism and gain a bootloader shell via the UART interface. This is achieved by ind…

  4. 6.8CVE-2025-59694EPSS 0.3%

    The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allows a physically proximate attacker to persistently modify firmware and influ…

  5. 7.5CVE-2025-59404EPSS 0.4%

    Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootloader unlocked. This permits bypass of Android Verified Boot (AVB) and allows direct modification of partitions.

  6. 6.1CVE-2025-4043EPSS 0.4%

    An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is executed on a system boot.

  7. 7.5CVE-2023-31345EPSS 0.2%

    Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.

  8. 7.8CVE-2022-2484EPSS 0.2%

    The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified firmware. This could result in the execution of a malicious kernel, arbitrary programs, or modified Nokia…

  9. 8.8CVE-2022-2482EPSS 0.2%

    A vulnerability exists in Nokia’s ASIK AirScale system module (versions 474021A.101 and 474021A.102) that could allow an attacker to place a script on the file system accessible from Linux. A script placed in the appropriate place could al…