Information disclosure

RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 implements the incorrect exception priotrity when accessing memory...

Design/Logic Flaw

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMP violation occurs during address translation...

Design/Logic Flaw

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMA violation occurs during address translation...

CVE-2022-34643

RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 implements the incorrect exception priotrity when accessing memory...

CVE-2022-34643

The CVE-2022-34643 entry concerns RISCV ISA Sim. Affected component: the riscv-isa-sim project, specifically commit ac466a21df442c59962589ba296c702631e041b5. Root cause: an incorrect exception prioritization when accessing memory. Impact: the uncertainty/incorrect handling of memory-access except...

CVE-2022-34641

CVE-2022-34641 affects CVA6 and RISCV-Boom due to an incorrect exception type emitted when a PMP violation occurs during address translation. Affected commits: CVA6 d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom ad64c5419151e5e886daee7084d8399713b46b4b. Consequence: this mismatch could l...

CVE-2022-34641

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMP violation occurs during address translation...

CVE-2022-34637

CVE-2022-34637 affects CVA6 (OpenHW Group) where loading an illegal virtual address triggers an incorrect exception type due to commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a. Descriptions across sources confirm the same root cause; no explicit mitigation or patched version is provided in the co...

CVE-2022-34637

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a implements an incorrect exception type when an illegal virtual address is loaded...

CVE-2022-34636

CVE-2022-34636 affects CVA6 and RISCV-Boom. The root issue is the use of an incorrect exception type when a PMA violation occurs during address translation. This is documented across multiple sources referencing the same commit set (CVA6 d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom ad6...

CVE-2022-34633

CVE-2022-34633 affects CVA6 (OpenHW Group) with a flaw in sfence.vma handling caused by a crafted or incorrectly formatted sfence.vma instruction in commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a. The CVSSv3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) indicates a local, low-privilege conditio...

CVE-2022-34633

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted sfence.vma instructions rather create an exception...

riscv-isa-sim 安全漏洞

riscv-isa-sim is a RISC-V ISA simulator. A security vulnerability exists in riscv-isa-sim that stems from an incorrect implementation of exception prioritization when accessing memory...

CVA6 安全漏洞

CVA6 is an application class 6 RISC-V CPU open-sourced by the OpenHW Group in Canada. A security vulnerability exists in CVA6 and RISCV-Boom that stems from a PMA violation during address translation that could result in an incorrect exception type...

CVA6 安全漏洞

CVA6 is an application class 6 RISC-V CPU open-sourced by the OpenHW Group in Canada. A security vulnerability exists in CVA6 that arises from the execution of a carefully crafted or incorrectly formatted sfence.vma instruction that could lead to the creation of an exception...

CVA6 安全漏洞

CVA6 is an application class 6 RISC-V CPU open-sourced by the OpenHW Group in Canada. A security vulnerability exists in CVA6 and RISCV-Boom that stems from a PMP conflict during address translation that could result in an incorrect exception type...

CVA6 安全漏洞

CVA6 is an application class 6 RISC-V CPU open-sourced by the OpenHW Group in Canada. A security vulnerability exists in CVA6 that arises from the execution of a carefully crafted or incorrectly formatted det instruction, which could lead to the creation of an exception...

CVA6 安全漏洞

CVA6 is an application class 6 RISC-V CPU open-sourced by the OpenHW Group in Canada. A security vulnerability exists in CVA6 that originates from loading an illegal virtual address, which may result in an incorrect exception type...

Huawei HarmonyOS Denial of Service Vulnerability (CNVD-2022-57611)

Huawei HarmonyOS is an operating system from Huawei, China. It provides a microkernel-based distributed operating system. A security vulnerability exists in the graphics component of Huawei HarmonyOS, stemming from the existence of a multi-threaded access database for the graphics acceleration...

IF A SINGLE ORDER FAILS, THE WHOLE FUNCTION REVERTS

Lines of code Vulnerability details Impact If a single order of the orders array fails, the whole function initiate or exit reverts with no information about which was the vulnerable order, the only information given is an Exception with a code of 5 Proof of Concept Tools Used editor Recommended...