24611 matches found
XiangShan 安全漏洞
XiangShan is an open-source high-performance RISC-V processor project developed by XiangShan in China. There is a security vulnerability in XiangShan, which stems from improper handling of exceptional conditions by the CSR subsystem. This vulnerability may allow local attackers to cause...
CVE-2026-29643
The CVE relates to XiangShan’s CSR subsystem (NewCSR) in an open‑source RISC‑V processor. The flaw is an improper exceptional‑condition handling when CSR operations target non‑existent/custom CSR addresses, which may trigger an illegal‑instruction exception but fail to reliably transfer control t...
CVE-2026-29643
XiangShan Open-source high-performance RISC-V processor commit edb1dfaf7d290ae99724594507dc46c2c2125384 2024-11-28 contains an improper exceptional-condition handling flaw in its CSR subsystem NewCSR. On affected versions, certain sequences of CSR operations targeting non-existent/custom CSR...
CVE-2026-29647
In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei CSRs even when mstateen0.IMSIC is cleared, potentially enabling cross-context information leakage or disruption of interrupt handling...
CVE-2026-29642
A local attacker who can execute privileged CSR operations or can induce firmware to do so performs carefully crafted reads/writes to menvcfg e.g., csrrs in M-mode. On affected XiangShan versions commit aecf601e803bfd2371667a3fb60bfcd83c333027, 2024-11-19, these menvcfg accesses can unexpectedly...
PT-2026-33840
In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei CSRs even when mstateen0.IMSIC is cleared, potentially enabling cross-context information leakage or disruption of interrupt handling...
PT-2026-33855
XiangShan Open-source high-performance RISC-V processor commit edb1dfaf7d290ae99724594507dc46c2c2125384 2024-11-28 contains an improper exceptional-condition handling flaw in its CSR subsystem NewCSR. On affected versions, certain sequences of CSR operations targeting non-existent/custom CSR...
CVE-2026-29642
CVE-2026-29642 affects XiangShan (RISC-V) and is triggered by local access performing privileged CSR operations on menvcfg (e.g., csrrs in M-mode). Careful reads/writes can cause WPRI bits in the status view (xstatus) to be set to 1, despite WPRI being defined as values that should not be modifie...
CVE-2026-6577
creationtimestamp| type| source ---|---|--- 2026-04-19 21:15:12+00:00| published-proof-of-concept| Telegram/ufJM6PGgYCZvMYI9YNw2SbGN8uW-GB10f-lGfe46lAW4 2026-04-19 21:29:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjuvjsryko2e 2026-04-19 23:53:28+00:00| seen|...
GHSA-W8J3-QVC3-H56F
creationtimestamp| type| source ---|---|--- 2026-04-19 07:22:56+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3mjtgake2o22p...
CVE-2026-2505
creationtimestamp| type| source ---|---|--- 2026-04-19 00:09:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116428462595537812 2026-04-19 03:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116429136061434312 2026-04-19 03:00:31+00:00| seen|...
PT-2026-33635
Apache Struts CVE-2026-6056 has been rejected, indicating no current security threat. This highlights the importance of verifying CVE statuses before panic. NerdieNews CyberSecurity InfoSec Ransomware Malware https://t.co/uHuPsnGEPa...
CVE-2026-2986
creationtimestamp| type| source ---|---|--- 2026-04-18 22:15:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116428013886069984 2026-04-19 01:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116428782134450850 2026-04-19 01:30:30+00:00| seen|...
MINI-R98C-H6WV-25XG
Bulletin has no description...
CVE-2006-3873
creationtimestamp| type| source ---|---|--- 2026-04-18 19:11:16+00:00| seen| https://gist.github.com/moyix/7271ab4536b6d8889e5474578f8ce3e0...
MINI-HF39-53PC-J3PR
Bulletin has no description...
MINI-P2WV-96WF-M49R
Bulletin has no description...
MINI-4FCP-V2Q2-G72J
Bulletin has no description...
CVE-2026-40493
creationtimestamp| type| source ---|---|--- 2026-04-18 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116423827633920562 2026-04-18 04:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjqm5bpu762l 2026-04-18 05:18:34+00:00| published-proof-of-concept|...