This vulnerability occurs when a system fails to properly manage write operations on memory hardware that has a limited lifespan, such as Flash or EEPROM. Without correct wear leveling, specific memory cells wear out faster than intended, leading to premature device failure.
Many non-volatile memory chips, like NAND Flash and EEPROM, have a fundamental physical limitation: each memory cell can only be written to or erased a finite number of times. To maximize the overall lifespan of the storage device, a technique called wear leveling is essential. It works by dynamically mapping the system's logical write requests across different physical memory blocks, ensuring that write cycles are distributed evenly instead of repeatedly hitting the same cells. If wear leveling is missing or implemented incorrectly, it creates a critical weakness. An attacker can exploit this by deliberately targeting the same logical addresses with frequent write operations. This causes the underlying physical cells to wear out rapidly, potentially bricking the storage device or making data unreliable far sooner than its rated endurance, which constitutes a denial-of-service attack against the hardware itself.
Impact: DoS: Instability
Effectiveness: High
// Do aligned alloc of (W+1) arrays each of size S while(1) {
c++other