Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1274: Improper Access Control for Volatile Memory Containing Boot Code

Base

The product conducts a secure-boot process that transfers bootloader code from Non-Volatile Memory (NVM) into Volatile Memory (VM), but it does not have sufficient access control or other protections for the Volatile Memory.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Ensure that the design of volatile-memory protections is enough to prevent modification from an adversary or untrusted code.

  2. Testing

    Test the volatile-memory protections to ensure they are safe from modification or untrusted code.

Source: MITRE CWE-1274

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.