← Back
CWE-1301

2 CVEs • Abstraction: Base

Insufficient or Incomplete Data Removal within Hardware Component

The product's data removal process does not completely delete all data and potentially sensitive information within hardware components.

JSON object

Loading...

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-29946
-
-
Jun 17, 2026
Feb 10, 2026
4.5 MEDIUM· v4
N/A· v3
N/A· v2
Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory.
CVE-2025-12216
1Azure Access
2Blu Ic2 Firmware
Blu Ic4 Firmware
Jun 17, 2026
Oct 25, 2025
10.0 CRITICAL· v4
5.5 MEDIUM· v3
N/A· v2
Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.