PT-2021-13494

CVE-2021-1104

·

Published

2021-08-13

·

Updated

2021-08-23

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions RISC-V Instruction Set Manual (affected versions not specified)
Description The RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector Base Address (MTVEC) register. This ambiguity may lead to a vulnerability due to the initial state of the register not being defined, potentially leading to information disclosure, data tampering, and denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾