← Back
CWE-1190

2 CVEs • Abstraction: Base

DMA Device Enabled Too Early in Boot Phase

The product enables a Direct Memory Access (DMA) capable device before the security configuration settings are established, which allows an attacker to extract data from or gain privileges on the product.

JSON object

Loading...

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-28653
1Google
1Android
Sep 15, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is...Show more
In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Show less
CVE-2022-22566
1Dell
214Alienware Area 51m R1 Firmware
Alienware Area 51m R2 FirmwareAlienware M15 R3 Firmware+211 more
Jun 17, 2026
Feb 9, 2022
N/A· v4
7.2 HIGH· v3
7.2 HIGH· v2
Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in...Show more
Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device.Show less