CWE-1190

DMA Device Enabled Too Early in Boot Phase

High

Description

The product enables a Direct Memory Access (DMA) capable device before the security configuration settings are established, which allows an attacker to extract data from or gain privileges on the product.

Potential Impact

How to Fix

Architecture and Design

Utilize an IOMMU to orchestrate IO access from the start of the boot process.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-1190 vulnerabilities in your codebase.

Get Security Assessment