CVE-2026-62958

libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the host emulator. Memory::binaryloader checks PTLOAD program-header bounds, but Memory::serializeexecutesegment trusts section-header shoffset and shsize when locating .text without...

EUVD-2026-114467

libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the host emulator. Memory::binaryloader checks PTLOAD program-header bounds, but Memory::serializeexecutesegment trusts section-header shoffset and shsize when locating .text without...

CVE-2026-62958 libriscv: Out of bounds read vuln in the ELF parser (Denial of service)

libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the host emulator. Memory::binaryloader checks PTLOAD program-header bounds, but Memory::serializeexecutesegment trusts section-header shoffset and shsize when locating .text without...

CVE-2026-62958

Prior to version 1.18 , libriscv (a RISC-V sandbox and emulator) is vulnerable to an out-of-bounds read in its ELF parser. The root cause is that Memory::serialize_execute_segment and Memory::lookup() trust section-header sh_offset and sh_size values without verifying the file range against m_bin...

CVE-2026-62958

A vulnerability in Libriscv allows the attacker to crash the sandbox using an Out of Bounds Read. To create Bad elf: python3 poc.py samplefile poisonedfile Results: ❯ python3 poc.py fib poisonedfile Manipulating .text section header at offset 0x250 Manipulating .symtab section header at offset...

CVE-2026-62958: libriscv: libriscv is a RISC-V sandbox and emulator

libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the host emulator. Memory ::binaryloader checks PTLOAD program-header bounds, but Memory ::serializeexecutesegment trusts section-header shoffset and shsize when locating .text without...