Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1290: Incorrect Decoding of Security Identifiers

Base Incomplete

The product implements a decoding mechanism to decode certain bus-transaction signals to security identifiers, but it decodes an untrusted agent's security identifier into a trusted agent's security identifier.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Security identifier decoders must be reviewed for design consistency and common weaknesses.

  2. Implementation

    Access and programming flows must be tested in pre-silicon and post-silicon testing in order to check for this weakness.

Source: MITRE CWE-1290

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2026-55222

    Isar: Unprivileged user ownership of trusted repository GPG public keys storage after bootstrap

    Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manually during bootstrap setup to be able to deploy local keys. By that, the directory is owned by the calling user (the one…

    ilbers isar