CVE-2021-1104

2021-08-1315:40:51

nvidia

www.cve.org

risc-v

mtvec

vulnerability

information disclosure

data tampering

denial of service

AI Score

9.4

Confidence

High

EPSS

0.003

Percentile

71.5%

JSON

The RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector Base Address (MTVEC) register that may lead to a vulnerability due to the initial state of the register not being defined, potentially leading to information disclosure, data tampering and denial of service.

CNA Affected

[
  {
    "product": "Machine Trap Base Address (MTVEC) Register",
    "vendor": "RISCV.org",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  }
]