CVE-2025-14302CWE-693

CVE-2025-14302

Medium · published December 17, 2025

CVSS v3.1
6.8
EPSS
0%
Percentile
27.0
In the wild
Unconfirmed
What it is

Certain motherboard models developed by GIGABYTE has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00346 · 27.0th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2025-12-17T08:15Z
References (3)
EPSS history
Timeline
  • 17 DEC 03:07Z
    GIGABYTE|Motherboard - Protection Mechanism Failure
    cvelistv5