Skip to content
Medium Published: Dec 17, 2025

CVE-2025-14302

6.8 CVSS Score Medium
Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Export CVE-2025-14302 Data:
Share:
Link copied!

Description

Certain motherboard models developed by GIGABYTE has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.

CVSS Vector Details

Attack Vector Physical
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Weaknesses (CWE)

  • CWE-693

References & External Links

External Resources

NVD Official Record Exploit-DB Search Exploits CVE Details Statistics GitHub PoC / Tools X / Twitter Discussions Google Search More

Related Vulnerabilities

CVE-2016-0772 CVSS 0 Same weakness: CWE-693 CVE-2017-8864 CVSS 0 Same weakness: CWE-693 CVE-2018-6794 CVSS 0 Same weakness: CWE-693 CVE-2018-0138 CVSS 0 Same weakness: CWE-693 CVE-2018-0243 CVSS 0 Same weakness: CWE-693

CVE History Timeline

Dec 17, 2025 03:15 New CVE Received
← Back to CVE Tracker