CVE-2025-8774

🗓️ 09 Aug 2025 20:32:05Reported by VulDBType

Vulnerability in riscv-boom SonicBOOM up to 2.2.3 affects L1 Data Cache Handler; timing discrepancy.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-8774	10 Aug 202501:11	–	circl
CNNVD	riscv-boom SonicBOOM 安全漏洞	9 Aug 202500:00	–	cnnvd
Cvelist	CVE-2025-8774 riscv-boom SonicBOOM L1 Data Cache timing discrepancy	9 Aug 202520:32	–	cvelist
EUVD	EUVD-2025-24063	3 Oct 202520:07	–	euvd
NVD	CVE-2025-8774	9 Aug 202521:15	–	nvd
Positive Technologies	PT-2025-32455 · Sonicboom · Sonicboom	9 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-8774	11 Aug 202520:33	–	redhatcve
Vulnrichment	CVE-2025-8774 riscv-boom SonicBOOM L1 Data Cache timing discrepancy	9 Aug 202520:32	–	vulnrichment

NVD

Vulners

Node

boom-core risvc-boomRange≤2.2.3

[
  {
    "vendor": "riscv-boom",
    "product": "SonicBOOM",
    "versions": [
      {
        "version": "2.2.0",
        "status": "affected"
      },
      {
        "version": "2.2.1",
        "status": "affected"
      },
      {
        "version": "2.2.2",
        "status": "affected"
      },
      {
        "version": "2.2.3",
        "status": "affected"
      }
    ],
    "modules": [
      "L1 Data Cache Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/fizz-is-on-the-way/vuls_cpu/tree/master/MSHRush
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

29 Apr 2026 01:00Current

7High risk

Vulners AI Score7

CVSS 3.12.5 - 4.7

CVSS 21

CVSS 42

CVSS 32.5

EPSS0.00081

SSVC