Vulnerabilities
10 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2022-34641 | CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMP violation occurs during address translation. NVD description · AI analysis pending | 5.5 | <1% | PoC ×2 |
| — | |
| CVE-2022-34635 | The mstatus.sd field in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a does not update when the mstatus.fs field is set to Dirty. The mstatus.sd field in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a does not update when the mstatus.fs field is set to Dirty. NVD description · AI analysis pending | 9.8 group max | <1% | PoC |
| — | |
| CVE-2022-33021 +1 in the same advisory: …33023 | CVA6 commit 909d85a accesses invalid memory when reading the value of MHPMCOUNTER30. CVA6 commit 909d85a accesses invalid memory when reading the value of MHPMCOUNTER30. NVD description · AI analysis pending | 7.5 | 1% | PoC |
| — |