UEFI Vulnerability Allows DMA Attacks on Major Motherboard Brands

UEFI Vulnerability Allows DMA Attacks on Major Motherboard Brands

First seen 19 Dec 2025, 17:03 UTC •ThehackernewsSecurityaffairs.CoBleepingcomputerTechradar •36.2

Article Content

Browse articles
ThreatCluster

A vulnerability in the UEFI firmware of motherboards from ASUS, Gigabyte, MSI, and ASRock allows direct memory access (DMA) attacks that can bypass early-boot memory protections. The issue has been assigned multiple CVE identifiers (CVE-2025-11901, CVE-2025-14302, CVE-2025-14303, CVE-2025-14304) due to variations in vendor implementations.

How this analysis works

Extracted Entities

1 / 2