Vulnerability Description
Certain motherboard models developed by GIGABYTE has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://www.gigabyte.com/Support/Security?type=1
- https://www.twcert.org.tw/en/cp-139-10575-e4f41-2.html
- https://www.twcert.org.tw/tw/cp-132-10574-ddf09-1.html
FAQ
What is CVE-2025-14302?
CVE-2025-14302 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Certain motherboard models developed by GIGABYTE has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe...
How severe is CVE-2025-14302?
CVE-2025-14302 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-14302?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.