PT-2022-22260 · Cva6 · Cva6

Phantom1003 · Published 2022-07-18 · Updated 2022-07-26 · CVE-2022-34637

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions CVA6 (affected versions not specified)

Description The issue arises from an incorrect exception type being implemented when an illegal virtual address is loaded, specifically in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2022-34637

Affected Products

Cva6

References · 6

• 🔥 https://github.com/openhwgroup/cva6/issues/904 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-34637 · Security Note
• https://osv.dev/vulnerability/CVE-2022-34637 · Vendor Advisory
• https://t.me/cvenotify/33800 · Telegram Post
• https://t.me/cibsecurity/46524 · Telegram Post
• https://t.me/cvenotify/33346 · Telegram Post