CWE-1260: Improper Handling of Overlap Between Protected Memory Ranges
CWE版本: 4.18
更新日期: 2025-09-09
弱点描述
The product allows address regions to overlap, which can result in the bypassing of intended memory protection.
常见后果
影响范围: Confidentiality Integrity Availability
技术影响: Modify Memory Read Memory DoS: Instability
潜在缓解措施
阶段: Architecture and Design
阶段: Implementation
有效性: High
检测方法
方法: Manual Analysis
Create a high privilege memory block of any arbitrary size. Attempt to create a lower privilege memory block with an overlap of the high privilege memory block. If the creation attempt works, fix the hardware. Repeat the test.
有效性: High
观察示例
参考: CVE-2008-7096
virtualization product allows compromise of hardware product by accessing certain remapping registers.
参考: [REF-1100]
processor design flaw allows ring 0 code to access more privileged rings by causing a register window to overlap a range of protected system RAM [REF-1100]
引入模式
| 阶段 | 说明 |
|---|---|
| Architecture and Design | Such issues could be introduced during hardware architecture and design or implementation and identified later during the Testing phase. |
| Implementation | - |