CVE-2026-29645

Katalog CVE

CVSS 7.5 · High EPSS 0,74%

Kerentanan Incorrect Calculation of Buffer Size pada xiangshan nemu. Skor CVSS 3.1 7.5 (High) menurut CISA ADP.

Deskripsi (NVD)

NEMU (OpenXiangShan/NEMU) before v2025.12.r2 contains an improper instruction-validation flaw in its RISC-V Vector (RVV) decoder. The decoder does not correctly validate the funct3 field when decoding vsetvli/vsetivli/vsetvl, allowing certain invalid OP-V instruction encodings to be misinterpreted and executed as vset* configuration instructions rather than raising an illegal-instruction exception. This can be exploited by providing crafted RISC-V binaries to cause incorrect trap behavior, architectural state corruption/divergence, and potential denial of service in systems that rely on NEMU for correct execution or sandboxing.

Rincian

Terbit di NVD

20 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-131: Incorrect Calculation of Buffer Size
CWE-1287: Improper Validation of Specified Type of Input

EPSS (30 hari)

0,74% peluang dieksploitasi; lebih tinggi dari 53,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/OpenXiangShan/NEMU/commit/481de637d5fc5838356caee80a79e56a33754039 patch
• https://docs.riscv.org/reference/isa/unpriv/v-st-ext.html product
• https://github.com/OpenXiangShan/NEMU/issues/952 issue tracking
• https://github.com/OpenXiangShan/NEMU/pull/958 issue tracking