CWE-1223 Race Condition for Write-Once Attributes

base

A write-once register in hardware design is programmable by an untrusted software component earlier than the trusted software component, resulting in a race condition issue.

01

parent weaknesses

Broader classes this is a kind of.

02

vulnerabilities (7)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2022-29859UScritical9.8—
component/common/network/dhcp/dhcps.c in ambiot amb1_sdk (aka SDK for Ameba1) before 2022-03-11 mishandles data structures for DHCP packet data.
CVE-2026-10743UShigh8.8—
IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN operations.
CVE-2024-2975UShigh7.5—
A race condition was identified through which privilege escalation was possible in certain configurations.
CVE-2017-5040USmedium4.3—
V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in…
CVE-2026-46002USmedium5.5—
In the Linux kernel, the following vulnerability has been resolved: ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() ext2_iget() already rejects inodes with i_…
CVE-2026-117942US——
Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…
CVE-2025-0077US——
In multiple functions of UserController.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with no additional ex…
03

attack patterns (1)

CAPEC attack patterns that exploit this.

04

source

Where this definition is published.

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan