New UEFI Flaw Enables Early-Boot DMA Attacks on ASRock, ASUS, GIGABYTE, MSI Motherboards

🗓️ 19 Dec 2025 08:25:00Reported by The Hacker NewsType

A UEFI flaw on ASRock, ASUS, GIGABYTE and MSI motherboards enables early-boot direct memory access before the OS loads.

Reporter	Title	Published	Views	Family All 42
BDU FSTEC	The vulnerability of UEFI microprogramming on GIGABYTE motherboards based on Intel and AMD chipsets allows a hacker to perform DMA attacks and circumvent existing security restrictions.	28 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of UEFI microprogramming on ASUS motherboard based on Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, W680 chipsets allows a hacker to perform a DMA attack and circumvent existing security restrictions.	28 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of UEFI microprogramming on MSI motherboards based on Intel 600 and 700 chipsets allows a hacker to perform DMA attacks and circumvent existing security restrictions.	28 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of UEFI microprogramming on ASRock motherboard based on Intel 500, 600, 700, and 800 chipsets allows a hacker to perform DMA attacks and circumvent existing security restrictions.	28 Jan 202600:00	–	bdu_fstec
Circl	CVE-2025-11901	19 Dec 202516:05	–	circl
Circl	CVE-2025-14302	22 Dec 202508:39	–	circl
Circl	CVE-2025-14303	19 Dec 202516:05	–	circl
Circl	CVE-2025-14304	19 Dec 202516:05	–	circl
CNNVD	ASUS Motherboards 安全漏洞	17 Dec 202500:00	–	cnnvd
CNNVD	MSI Motherboards 安全漏洞	17 Dec 202500:00	–	cnnvd

20 Dec 2025 13:28Current

6.8Medium risk

Vulners AI Score6.8

CVSS 47

CVSS 3.16.8

EPSS0.00314

SSVC