CVEbaza.pl › CWE Dictionary › CWE-1301

Common Weakness Enumeration

CWE-1301

Insufficient or Incomplete Data Removal within Hardware Component

Category: BaseCVE: 2

Description

The product's data removal process does not completely delete all data and potentially sensitive information within hardware components.

CVE vulnerabilities with CWE-1301 (2)

10.0

CVSS

CRITICAL

CVE-2025-12216

Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

pub. 2025-10-25

4.5

CVSS

MEDIUM

CVE-2025-29946

Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory.

pub. 2026-02-10

Information

ID: CWE-1301

Type: Base

Vulnerabilities: 2

MITRE CWE ↗

← CWE Dictionary