Vulnerability · Published Dec 17, 2025 · Assigned by twcert
CVE-2025-14302GIGABYTE｜Motherboard - Protection Mechanism Failure
Medium 6.8
In plain English
A medium-severity security flaw in AMD 600 chipset motherboard from GIGABYTE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 29% of all known vulnerabilities).
Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)0.3%top 71.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Certain motherboard models developed by GIGABYTE has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.
Affected products (as reported)
Weakness: CWE-693 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://www.twcert.org.tw/tw/cp-132-10574-ddf09-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-10575-e4f41-2.html third-party-advisory
- https://www.gigabyte.com/Support/Security?type=1 vendor-advisory