What the vulnerability does
01Description
An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DRAM address to SRAM, potentially resulting in loss of data integrity.
CVSS base score
5.2/10
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L
Key dates
02Disclosure timeline
August 13, 2024
CVE published
November 4, 2024
Record updated
External resources
