This page lists publicly disclosed CVE vulnerabilities affecting openhwgroup cva6 (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2022-34641 | CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMP violation occurs during address translation. | [email protected] | 5.5 | 0.28% | 2022-07-18 | 2026-06-17 |
| CVE-2022-34640 | The *tval of ecall/ebreak in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a was discovered to be incorrect. | [email protected] | 5.5 | 0.21% | 2022-07-18 | 2026-06-17 |
| CVE-2022-34639 | CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a treats non-standard fence instructions as illegal which can affect the function of the application. | [email protected] | 5.5 | 0.24% | 2022-07-18 | 2026-06-17 |
| CVE-2022-34637 | CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a implements an incorrect exception type when an illegal virtual address is loaded. | [email protected] | 5.5 | 0.21% | 2022-07-18 | 2026-06-17 |
| CVE-2022-34636 | CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMA violation occurs during address translation. | [email protected] | 5.5 | 0.23% | 2022-07-18 | 2026-06-17 |
| CVE-2022-34635 | The mstatus.sd field in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a does not update when the mstatus.fs field is set to Dirty. | [email protected] | 9.8 | 0.77% | 2022-07-18 | 2026-06-17 |
| CVE-2022-34634 | CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted det instructions rather create an exception. | [email protected] | 5.5 | 0.23% | 2022-07-18 | 2026-06-17 |
| CVE-2022-34633 | CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted sfence.vma instructions rather create an exception. | [email protected] | 5.5 | 0.23% | 2022-07-18 | 2026-06-17 |
| CVE-2022-33023 | CVA6 commit 909d85a gives incorrect permission to use special multiplication units when the format of instructions is wrong. | [email protected] | 7.5 | 0.59% | 2022-06-29 | 2026-06-17 |
| CVE-2022-33021 | CVA6 commit 909d85a accesses invalid memory when reading the value of MHPMCOUNTER30. | [email protected] | 7.5 | 1.04% | 2022-06-29 | 2026-06-17 |