PT-2022-22257 · Cva6 · Cva6

Phantom1003 · Published 2022-07-18 · Updated 2022-07-26 · CVE-2022-34634

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions CVA6 version d315ddd0f1be27c1b3f27eb0b8daf471a952299a

Description The issue arises when CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted det instructions, which it fails to handle by creating an exception.

Recommendations For CVA6 version d315ddd0f1be27c1b3f27eb0b8daf471a952299a, consider implementing proper exception handling for det instructions to prevent potential issues. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2022-34634

Affected Products

Cva6

References · 7

• 🔥 https://github.com/openhwgroup/cva6/issues/899 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-34634 · Security Note
• https://osv.dev/vulnerability/CVE-2022-34634 · Vendor Advisory
• https://github.com/openhwgroup/cva6/pull/922 · Note
• https://t.me/cvenotify/33362 · Telegram Post
• https://t.me/cvenotify/33349 · Telegram Post
• https://t.me/cvenotify/33798 · Telegram Post