Vulnerabilities

TI-2026-23356 CVE-2026-29649 · GHSA-p786-pp8p-8p3m

NEMU contains an implementation flaw in its RISC-V Hypervisor CSR handling where…

MEDIUM 49

NEMU contains an implementation flaw in its RISC-V Hypervisor CSR handling where henvcfg[7:4] (CBIE/CBCFE/CBZE-related fields) is incorrectly masked/updated based on menvcfg[7:4], so a machine-mode write to menvcfg can i…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00448 Published 2026-04-20 No fix listed CWE-693

TI-2026-23352 CVE-2026-29645 · GHSA-prqq-qrc5-xvpr

NEMU (OpenXiangShan/NEMU) before v2025.12.r2 contains an improper instruction-validation…

MEDIUM 40

NEMU (OpenXiangShan/NEMU) before v2025.12.r2 contains an improper instruction-validation flaw in its RISC-V Vector (RVV) decoder.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00543 Published 2026-04-20 No fix listed CWE-1287

TI-2025-39231 CVE-2025-63094 · GHSA-mc7g-hphg-2wrh

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution…

MEDIUM 40

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00583 Published 2025-12-10 No fix listed CWE-200

Vulnerabilities

Filters

NEMU contains an implementation flaw in its RISC-V Hypervisor CSR handling where…

NEMU (OpenXiangShan/NEMU) before v2025.12.r2 contains an improper instruction-validation…

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution…