PT-2022-21650 · Cva6 · Cva6

Chenc6 · Published 2022-06-29 · Updated 2022-07-08 · CVE-2022-33021

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions CVA6 version 909d85a

Description The issue arises when the CVA6 commit 909d85a attempts to read the value of MHPMCOUNTER30, resulting in access to invalid memory.

Recommendations For CVA6 version 909d85a, consider restricting access to the MHPMCOUNTER30 counter until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2022-33021

Affected Products

Cva6

References · 4

• 🔥 https://github.com/openhwgroup/cva6/issues/884 · Exploit
• https://osv.dev/vulnerability/CVE-2022-33021 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-33021 · Security Note
• https://t.me/cibsecurity/45357 · Telegram Post