If separate discrete chips/peripherals that have access to the same physical memory, a threat actor with access to one peripheral could perform a Direct Memory Access (DMA) attack to maliciously read/write memory from a connected chip or peripheral. This threat is especially relevant if there is insufficient hardware or software restrictions on what memory can be accessed/manipulated. A DMA attack can be used to extract cryptographic keys or other sensitive data, and also to manipulate the operation of the chip.

• CWE-1260: Improper Handling of Overlap Between Protected Memory Ranges (Base)
• CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CWE-284: Improper Access Control