{"vulnerability": "cve-2025-14303", "sightings": [{"uuid": "8d7cf11a-849a-48a5-9878-d3080bde5135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14303", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mae2zt7n632l", "content": "", "creation_timestamp": "2025-12-19T16:05:39.175655Z"}, {"uuid": "b00403cd-71e2-4434-a4f1-24395b93fead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14303", "type": "published-proof-of-concept", "source": "https://t.me/xakep_ru/18676", "content": "\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c UEFI \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0438\u043c \u043f\u043b\u0430\u0442\u0430\u043c Gigabyte, MSI, Asus \u0438 ASRock\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Riot Games \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0438\u043c\u043f\u043b\u0435\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 UEFI \u043d\u0430 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0438\u0445 \u043f\u043b\u0430\u0442\u0430\u0445 Asus, Gigabyte, MSI \u0438 ASRock. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 DMA-\u0430\u0442\u0430\u043a\u0443 (\u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0430\u043c\u044f\u0442\u0438) \u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0441\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 (CVE-2025-11901, CVE-2025-14302, CVE-2025-14303 \u0438 CVE-2025-14304) \u0438\u0437-\u0437\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u0439 \u0438\u043c\u043f\u043b\u0435\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0439 \u0440\u0430\u0437\u043d\u044b\u0445 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432.\n\nhttps://xakep.ru/2025/12/22/uefi-bug/", "creation_timestamp": "2025-12-22T08:39:26.000000Z"}, {"uuid": "0ed818e1-f155-48f9-ab5e-9d8e8b64d276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14303", "type": "seen", "source": "https://t.me/sysodmins/27923", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 UEFI \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0438\u043c \u043f\u043b\u0430\u0442\u0430\u043c Gigabyte, MSI, Asus \u0438 ASRock \u0435\u0449\u0451 \u0434\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u041e\u0421 \ud83c\udfb9\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 UEFI \u0443 Asus, Gigabyte, MSI \u0438 ASRock. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 CVE \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0442 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 (CVE-2025-11901, CVE-2025\u201114302, CVE-2025-14303 \u0438 CVE-2025-14304). \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DMA-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u043a\u043e\u0433\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0435\u0449\u0451 \u043d\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u0430.\n\n\u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 UEFI \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c IOMMU - \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440 \u043f\u0430\u043c\u044f\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 (DMA). \u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u0430\u0449\u0438\u0442\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430, \u043d\u043e \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 IOMMU \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442, \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u041e\u0417\u0423 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u043f\u0438\u0441\u0438. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 PCIe-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0434\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430. \u0412 \u043c\u043e\u043c\u0435\u043d\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI \u044d\u0442\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441\u043c\u043e\u0436\u0435\u0442 \u0431\u0435\u0441\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u044b\u0447\u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u0430 \u041e\u0421. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0430\u0442\u0430\u043a\u0430 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0434\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043d\u0438\u043a\u0430\u043a\u0438\u0435 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u044b \u0438\u043b\u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u044b \u043d\u0435 \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435 \u0432\u0441\u0435 \u043c\u043e\u0434\u0435\u043b\u0438, \u043d\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043a\u0430\u0441\u0430\u0442\u044c\u0441\u044f \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 (BIOS/UEFI) \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0445 \u043f\u043e\u0441\u043b\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \ud83d\udcbc\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2025-12-21T13:02:26.000000Z"}, {"uuid": "2f29301f-61ff-4fc4-a59a-a8125bf1af8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14303", "type": "seen", "source": "https://gist.github.com/hermanho/5e01f95cc83cbb3a00559d1b97240f52", "content": "# MSI PRO Z690-A DDR4 / BIOS 7D25v1N white BIOS screen fix\n\nAfter updating to the latest AMI BIOS **7D25v1N** (released for Secure Boot CA updates / security hardening), my PC could still boot into **Windows**, but I could **no longer enter BIOS**.\n\n## My hardware\n- **Motherboard:** MSI PRO Z690-A DDR4\n- **CPU:** Intel i7 KF\n- **GPU:** MSI GTX 970\n\n## Symptom\nAfter flashing BIOS **7D25v1N**:\n- Windows boots normally\n- Entering BIOS results in a **white screen**\n- Only **two numbers** are shown on screen\n\n## Likely cause\nThis BIOS changes some security-related defaults because of a vulnerability fix.\n\nRelease note excerpt:\n\n> Security enhancement: Enable Pre-boot DMA Protection, VT-d, and IOMMU Pre-boot defaults. (CVE-2025-14303)\n\nIn my case, the issue appears to be caused by **VT-d being enabled by default** after the update. This seems to affect BIOS display behavior with some older discrete GPUs.\n\n## Similar reports\n- [White BIOS screen after PRO H610M-E DDR4 firmware upgrade](https://forum-en.msi.com/index.php?threads/white-bios-screen-after-pro-h610m-e-ddr4-firmware-upgrade.416641/)\n- [Z690 Tomahawk WiFi DDR4 white screen in the BIOS on AMD RX550 and NV GT710](https://forum-en.msi.com/index.php?threads/z690-tomahawk-wifi-ddr4-white-screen-in-the-bios-on-amd-rx550-and-nv-gt710.414327/)\n- [BIOS corrupted / white screen after update B760 Gaming Plus WiFi E7D98IMS.HC0](https://forum-en.msi.com/index.php?threads/bios-corrupted-white-screen-after-update-b760-gaming-plus-wifi-e7d98ims-hc0.415562/)\n\n## Workaround\nThe workaround is to **disable Intel VT-D**, which restored normal BIOS access for me.\n\nIn my case, this was tricky because:\n- My CPU is an **i7 KF**, so there is **no iGPU**\n- I could not enter BIOS setup directly\n- But I was still able to change the setting from **Windows**\n\n## Fix from Windows using SCEWIN\nRun these steps in **Command Prompt as Administrator**.\n\n### 1. Open an elevated Command Prompt\nLaunch **cmd** with **Run as administrator**.\n\n### 2. Go to the SCEWIN directory\n```bat\ncd \"C:\\Program Files (x86)\\MSI\\MSI Center\\Lib\\SCEWIN\\5.05.01.0002\"\n```\n\n### 3. Check the current Intel VT-D setting\n```bat\nSCEWIN_64.exe /o /lang \"en-US\" /ms \"Intel VT-D Tech\" /hb\n```\n\nExample output:\n```text\nOptions =*[01]Enabled\n         [00]Disabled\n```\n\n### 4. Disable Intel VT-D\n```bat\nSCEWIN_64.exe /i /lang \"en-US\" /ms \"Intel VT-D Tech\" /qv 0x0 /hb\n```\n\nExample output:\n```text\nWarning: Power cycle reset required for some of the updated controls.\n\nQuestion value imported successfully.\n```\n\n### 5. Fully power cycle the machine\nShut down completely, then power it back on.\n\n## Result\nAfter disabling **Intel VT-D**, I was able to enter BIOS normally again.\n\n## Notes\n- This may help if you have:\n  - BIOS **7D25v1N** or another recent MSI BIOS with similar security hardening\n  - an older discrete GPU\n  - a system that still boots into Windows but shows a white screen in BIOS\n- Since my CPU is **i7 KF**, using a Windows-based configuration tool was necessary because I had no iGPU fallback.\n- This is a workaround based on my experience and similar reports, not an official MSI fix.\n\n## Keywords\nMSI, PRO Z690-A DDR4, 7D25v1N, white BIOS screen, BIOS cannot open, Intel VT-D, IOMMU, Pre-boot DMA Protection, CVE-2025-14303, GTX 970, KF CPU, SCEWIN", "creation_timestamp": "2026-05-18T01:54:48.000000Z"}]}