CWE-1190
DMA Device Enabled Too Early in Boot Phase
The product enables a Direct Memory Access (DMA) capable device before the security configuration settings are established, which allows an attacker to extract data from or gain privileges on the product.
Impactr finds and proves whether CWE-1190 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.