CVE-2020-10255

Modern DRAM chips (DDR4 and LPDDR4 after 2015) are affected by a vulnerability in deployment of internal mitigations against RowHammer attacks known as Target Row Refresh (TRR), aka the TRRespass issue. To exploit this vulnerability, the attacker needs to create certain access patterns to trigger bit flips on affected memory modules, aka a Many-sided RowHammer attack. This means that, even when chips advertised as RowHammer-free are used, attackers may still be able to conduct privilege-escalation attacks against the kernel, conduct privilege-escalation attacks against the Sudo binary, and achieve cross-tenant virtual-machine access by corrupting RSA keys. The issue affects chips produced by SK Hynix, Micron, and Samsung. NOTE: tracking DRAM supply-chain issues is not straightforward because a single product model from a single vendor may use DRAM chips from different manufacturers.

• CWE-20

• https://download.vusec.net/papers/trrespass_sp20.pdfThird Party Advisory
• https://github.com/vusec/trrespassProduct
• https://thehackernews.com/2020/03/rowhammer-vulnerability-ddr4-dram.htmlThird Party Advisory
• https://twitter.com/antumbral/status/1237425959407513600Third Party Advisory
• https://twitter.com/vu5ec/status/1237399112590467072Third Party Advisory
• https://www.vusec.net/projects/trrespass/Third Party Advisory
• https://download.vusec.net/papers/trrespass_sp20.pdfThird Party Advisory
• https://github.com/vusec/trrespassProduct
• https://thehackernews.com/2020/03/rowhammer-vulnerability-ddr4-dram.htmlThird Party Advisory
• https://twitter.com/antumbral/status/1237425959407513600Third Party Advisory
• https://twitter.com/vu5ec/status/1237399112590467072Third Party Advisory
• https://www.vusec.net/projects/trrespass/Third Party Advisory

Published

Mar 10, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10249BWA DiREX-Pro 1.2181 devices allow full path disclosure via …5.3
• CVE-2020-1025An elevation of privilege vulnerability exists when Microsof…9.8
• CVE-2020-10250BWA DiREX-Pro 1.2181 devices allow remote attackers to execu…9.8
• CVE-2020-10251In ImageMagick 7.0.9, an out-of-bounds read vulnerability ex…5.5
• CVE-2020-10252An issue was discovered in ownCloud before 10.4. Because of …8.3
• CVE-2020-10254An issue was discovered in ownCloud before 10.4. An attacker…5.9
• CVE-2020-10256An issue was discovered in beta versions of the 1Password co…9.8
• CVE-2020-10257The ThemeREX Addons plugin before 2020-03-09 for WordPress l…9.8
• CVE-2020-1026A Security Feature Bypass vulnerability exists in the MSR Ja…9.8
• CVE-2020-10262An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.…6.8
• CVE-2020-10263An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.…6.8
• CVE-2020-10264CB3 SW Version 3.3 and upwards, e-series SW Version 5.0 and …8.8