CWE-1189
Improper Isolation of Shared Resources on System-on-a-Chip (SoC)
Extended description
A System-On-a-Chip (SoC) has a lot of functionality, but it may have a limited number of pins or pads. A pin can only perform one function at a time. However, it can be configured to perform multiple different functions. This technique is called pin multiplexing. Similarly, several resources on the chip may be shared to multiplex and support different features or functions. When such resources are shared between trusted and untrusted agents, untrusted agents may be able to access the assets intended to be accessed only by the trusted agents.
Common consequences2
- Access ControlBypass Protection Mechanism
If resources being used by a trusted user are shared with an untrusted user, the untrusted user may be able to modify the functionality of the shared resource of the trusted user.
- IntegrityQuality Degradation
The functionality of the shared resource may be intentionally degraded.
Potential mitigations1
- Architecture and Design
When sharing resources, avoid mixing agents of varying trust levels. Untrusted agents should not share resources with trusted agents.
CVEs referencing this CWE6
| CVE | Description | Severity | EPSS | Flags | Modified |
|---|---|---|---|---|---|
| CVE-2023-49141 | Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. | HIGH7.8 | 0.29%p21 | 2026-06-17 | |
| CVE-2025-54518 | Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation. | HIGH7.0 | 0.26%p17 | 2026-07-15 | |
| CVE-2023-42667 | Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. | HIGH7.8 | 0.24%p15 | 2026-06-17 | |
| CVE-2023-31325 | Improper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to tamper with the contents of the PSP reserved DRAM region potentially resulting in loss of confidentiality and integrity. | HIGH7.2 | 0.13%p3 | 2026-06-17 | |
| CVE-2024-36332 | Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorized access to specific victim range of GPU MMIO register space, potentially causing the host OS to reboot and creating a Denial of Service (DOS) condition. | NONE | 0.11%p1 | 2026-06-17 | |
| CVE-2025-54514 | Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity. | NONE | 0.10%p1 | 2026-06-17 |