Vulnerability · Published Aug 9, 2025 · Assigned by VulDB
CVE-2025-8774riscv-boom SonicBOOM L1 Data Cache timing discrepancy
Low 2.5
In plain English
A low-severity security flaw in SonicBOOM from riscv-boom. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).
Official description
A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component L1 Data Cache Handler. The manipulation leads to observable timing discrepancy. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| riscv-boom | SonicBOOM | 2.2.02.2.12.2.22.2.3 |
Weakness: CWE-208, CWE-203 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R
References
- VDB-319297 | riscv-boom SonicBOOM L1 Data Cache timing discrepancy vdb-entry
- VDB-319297 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
- Submit #625550 | SonicBOOM riscv-boom V2.2.3-210-gd77c2c3f implemented in Chipyard (V1.3.0) Improper Protection of Physical Side Channels third-party-advisory
- https://github.com/fizz-is-on-the-way/vuls_cpu/tree/master/MSHRush related