Xiangshan

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Xiangshan records in CISA KEV

No Xiangshan vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Nemu 2 records MEDIUM Xiangshan 1 record MEDIUM

Records

3 records

TI-2026-23356 CVE-2026-29649 · GHSA-p786-pp8p-8p3m

NEMU contains an implementation flaw in its RISC-V Hypervisor CSR handling where…

MEDIUM 49

NEMU contains an implementation flaw in its RISC-V Hypervisor CSR handling where henvcfg[7:4] (CBIE/CBCFE/CBZE-related fields) is incorrectly masked/updated based on menvcfg[7:4], so a machine-mode write to menvcfg can i…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00448 Published 2026-04-20 No fix listed CWE-693

TI-2026-23352 CVE-2026-29645 · GHSA-prqq-qrc5-xvpr

NEMU (OpenXiangShan/NEMU) before v2025.12.r2 contains an improper instruction-validation…

MEDIUM 40

NEMU (OpenXiangShan/NEMU) before v2025.12.r2 contains an improper instruction-validation flaw in its RISC-V Vector (RVV) decoder.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00543 Published 2026-04-20 No fix listed CWE-1287

TI-2025-39231 CVE-2025-63094 · GHSA-mc7g-hphg-2wrh

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution…

MEDIUM 40

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00583 Published 2025-12-10 No fix listed CWE-200

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0