Vulnerability · Published Aug 13, 2021 · Assigned by nvidia
CVE-2021-1104
Critical 9.8
In plain English
A critical-severity security flaw in Machine Trap Base Address (MTVEC) Register from RISCV.org. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 77% of all known vulnerabilities).
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)1.7%top 23.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector Base Address (MTVEC) register that may lead to a vulnerability due to the initial state of the register not being defined, potentially leading to information disclosure, data tampering and denial of service.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| RISCV.org | Machine Trap Base Address (MTVEC) Register | All versions |