DaMAgeCard Attack – New SD Card Attack Lets Hackers Directly Access System Memory

Security researchers disclosed the “DaMAgeCard” vulnerability in the SD Express standard, where SD cards using PCIe/NVMe mode can perform Direct Memory Access (DMA) to read or manipulate system memory. Using custom SD Express adapters with PCILeech, the team demonstrated PoC attacks against several devices (including gaming laptops and handheld consoles), highlighted widespread lack or misconfiguration of IOMMU protections, and warned that growing SD Express adoption across consumer devices expands the attack surface unless manufacturers implement proper mitigations.