CWE-1298 2 CVEs MITRE definition ↗

CWE-1298: Hardware Logic Contains Race Conditions

Overview

CWE-1298 (Hardware Logic Contains Race Conditions) documents a weakness type used across vulnerability databases and security assessments. Use the sections below for definition, context, and mapped CVEs.

Security impact
Security impact: Depends on product and context; use CVE records, severity scores, and MITRE guidance to prioritize.

Description

A race condition in the hardware logic results in undermining security guarantees of the system.

Applicable platforms

Kind Name Class Prevalence OS / CPE
language Verilog Undetermined
language VHDL Undetermined
technology System on Chip Undetermined

Related CVEs in this database

These CVEs are mapped to this weakness in this database and kept for traceability and search.

CVE Published Summary
CVE-2023-45733 2024-05-16 Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.
CVE-2023-20827 2023-09-03 In ims service, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed …

Content submission

Name
Arun Kanuparthi, Hareesh Khattri, Parbati Kumar Manna, Narasimha Kumar V Mangipudi
Organization
Intel Corporation
Date
2020-02-10
Version
4.2

Content modifications

Date Name Version Importance Comment
2021-07-20 CWE Content Team 4.5 updated Related_Attack_Patterns
2023-04-27 CWE Content Team 4.11 updated Relationships
2023-06-29 CWE Content Team 4.12 updated Mapping_Notes
2024-02-29 CWE Content Team 4.14 updated Demonstrative_Examples, References
2025-12-11 CWE Content Team 4.19 updated Weakness_Ordinalities

Contributions

Type Name Date Comment
Content Chen Chen, Rahul Kande, Jeyavijayan Rajendran 2023-11-29 suggested demonstrative example
Content Shaza Zeitouni, Mohamadreza Rostami, Ahmad-Reza Sadeghi 2023-11-29 suggested demonstrative example
cvelogic Threat Intelligence