Vulnerability Description
Certain motherboard models developed by MSI has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://csr.msi.com/global/product-security-advisories
- https://www.twcert.org.tw/en/cp-139-10577-3cd58-2.html
- https://www.twcert.org.tw/tw/cp-132-10576-0a0fd-1.html
FAQ
What is CVE-2025-14303?
CVE-2025-14303 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Certain motherboard models developed by MSI has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe devi...
How severe is CVE-2025-14303?
CVE-2025-14303 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-14303?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.