CWE-1301 · 2 records
Insufficient or Incomplete Data Removal within Hardware Component
CVEs in this class
2 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2025-12216No exploit | Malicious / Malformed App can be Installed but not Uninstalledazure-access · blu-ic2 firmware · CWE-1301 | Critical10.0 | — | 0.2% | Oct 25, 2025 |
18Monitor | CVE-2025-29946No exploit | Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU.amd · amd epyc™ 9005 series processors · CWE-1301 | Medium4.5 | — | 0.1% | Feb 10, 2026 |
- CVE-2025-1221640Plan
Malicious / Malformed App can be Installed but not Uninstalled
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 25, 2025
- CVE-2025-2994618Monitor
Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU.
MediumCVSS 4.5No exploitEPSS 0%amd · amd epyc™ 9005 series processorsFeb 10, 2026