PT-2022-22266 · Unknown · Riscv Isa Sim

Phantom1003 · Published 2022-07-18 · Updated 2022-07-26 · CVE-2022-34643

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions RISCV ISA Sim (affected versions not specified)

Description The issue is related to the implementation of exception priority when accessing memory in RISCV ISA Sim. Specifically, commit ac466a21df442c59962589ba296c702631e041b5 is mentioned as implementing the incorrect exception priority.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2022-34643

Affected Products

Riscv Isa Sim

References · 6

• 🔥 https://github.com/riscv-software-src/riscv-isa-sim/issues/971 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-34643 · Security Note
• https://osv.dev/vulnerability/CVE-2022-34643 · Vendor Advisory
• https://t.me/cvenotify/33802 · Telegram Post
• https://t.me/cibsecurity/46526 · Telegram Post
• https://t.me/cvenotify/33341 · Telegram Post