CWE-1274 · Other weaknesses
Improper Access Control for Volatile Memory Containing Boot Code
8CVEs
SortMost likely exploited
8 CVEs with CWE-1274 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-59404Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootloader unlocked. This permits bypass of Android Verified Boot (AVB) and allows direct modif…Flocksafety · Bravo Compute Box Firmware · CVSS 7.5 · 2025-09-25 | 7.5 | 0.4% | 2025-09-25 |
| CVE-2025-4043Milesight UG65-868M-EA Improper Access Control for Volatile Memory Containing Boot CodeMilesight · UG65-868M-EA · CVSS 6.8 · 2025-05-07 | 6.8 | 0.4% | 2025-05-07 |
| CVE-2025-59694The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allows a physically…Entrust · Nshield 5c Firmware · CVSS 6.8 · 2025-12-02 | 6.8 | 0.3% | 2025-12-02 |
| CVE-2022-2484The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified firmware. This could result in the execution…Nokia · ASIK AirScale · CVSS 8.4 · 2023-01-06 | 8.4 | 0.2% | 2023-01-06 |
| CVE-2022-2482A vulnerability exists in Nokia’s ASIK AirScale system module (versions 474021A.101 and 474021A.102) that could allow an attacker to place a script on the file system accessible f…Nokia · ASIK AirScale · CVSS 8.4 · 2023-01-06 | 8.4 | 0.2% | 2023-01-06 |
| CVE-2023-31345Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.AMD · AMD EPYC™ 7003 Processors · CVSS 7.5 · 2025-02-11 | 7.5 | 0.2% | 2025-02-11 |
| CVE-2025-29950Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.AMD · AMD EPYC™ 9004 Series Processors · CVSS 7.1 · 2026-02-10 | 7.1 | 0.2% | 2026-02-10 |
| CVE-2024-36345Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting…AMD · AMD EPYC™ 4004 · CVSS 4.6 · 2026-05-15 | 4.6 | 0.1% | 2026-05-15 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.