CVE-2026-71694

8.8 highEPSS 0.4%

High (8.8). EPSS 0.4% chance of exploitation in the next 30 days.

An issue in Berkeley Out-of-Order Machine (BOOM) / BoomTile RTL benchmark v1.2 2d08d0d8b4563212175212f9db0e69f6e68c9619 allows a remote attacker to execute arbitrary code via the CSR trap-return state restoration logic, MRET handling logic, mstatus.MPRV update path, CSRFile logic in ProcessorFuzz BOOM benchmark Benchmarks/Verilog/SmallBoomTile_v1.2_state.v

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2026-08-19
Modified: 2026-09-09
Record from: the NVD, synced 2026-10-19

References

https://github.com/bu-icsg/ProcessorFuzz
https://github.com/duan528/BOOM-MRET-MPRV-Vulnerability-Report
https://github.com/riscv-boom/riscv-boom
https://github.com/riscv/riscv-isa-manual

Check your stack JSON