Common Weakness Enumeration

1265

Unintended Reentrant Invocation of Non-reentrant Code Via Nested Calls

1266

Improper Scrubbing of Sensitive Data from Decommissioned Device

1267

Policy Uses Obsolete Encoding

1268

Policy Privileges are not Assigned Consistently Between Control and Data Agents

1269

Product Released in Non-Release Configuration

1270

Generation of Incorrect Security Tokens

1271

Uninitialized Value on Reset for Registers Holding Security Settings

1272

Sensitive Information Uncleared Before Debug/Power State Transition

1273

Device Unlock Credential Sharing

1274

Improper Access Control for Volatile Memory Containing Boot Code

1275

Sensitive Cookie with Improper SameSite Attribute

1276

Hardware Child Block Incorrectly Connected to Parent System

1277

Firmware Not Updateable

1278

Missing Protection Against Hardware Reverse Engineering Using Integrated Circuit (IC) Imaging Techniques

1279

Cryptographic Operations are Run Before Supporting Units are Ready

1280

Access Control Check Implemented After Asset is Accessed

1281

Sequence of Processor Instructions Leads to Unexpected Behavior

1282

Assumed-Immutable Data is Stored in Writable Memory

1283

Mutable Attestation or Measurement Reporting Data

1284

Improper Validation of Specified Quantity in Input

1285

Improper Validation of Specified Index, Position, or Offset in Input

1286

Improper Validation of Syntactic Correctness of Input

1287

Improper Validation of Specified Type of Input

1288

Improper Validation of Consistency within Input

1289

Improper Validation of Unsafe Equivalence in Input

1290

Incorrect Decoding of Security Identifiers

1291

Public Key Re-Use for Signing both Debug and Production Code

1292

Incorrect Conversion of Security Identifiers

1293

Missing Source Correlation of Multiple Independent Data

1294

Insecure Security Identifier Mechanism

1295

Debug Messages Revealing Unnecessary Information

1296

Incorrect Chaining or Granularity of Debug Components

1297

Unprotected Confidential Information on Device is Accessible by OSAT Vendors

1298

Hardware Logic Contains Race Conditions

1299

Missing Protection Mechanism for Alternate Hardware Interface

1300

Improper Protection of Physical Side Channels

1301

Insufficient or Incomplete Data Removal within Hardware Component

1302

Missing Source Identifier in Entity Transactions on a System-On-Chip (SOC)

1303

Non-Transparent Sharing of Microarchitectural Resources

1304

Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation

1310

Missing Ability to Patch ROM Code

1311

Improper Translation of Security Attributes by Fabric Bridge

1312

Missing Protection for Mirrored Regions in On-Chip Fabric Firewall

1313

Hardware Allows Activation of Test or Debug Logic at Runtime

1314

Missing Write Protection for Parametric Data Values

1315

Improper Setting of Bus Controlling Capability in Fabric End-point

1316

Fabric-Address Map Allows Programming of Unwarranted Overlaps of Protected and Unprotected Ranges

1317

Improper Access Control in Fabric Bridge

1318

Missing Support for Security Features in On-chip Fabrics or Buses

1319

Improper Protection against Electromagnetic Fault Injection (EM-FI)