VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Aug 13, 2021· Updated Jun 17, 2026

CVE-2021-1104

CVE-2021-1104

Description

The RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector Base Address (MTVEC) register that may lead to a vulnerability due to the initial state of the register not being defined, potentially leading to information disclosure, data tampering and denial of service.

Affected products

4
  • RISC-V/Instruction Set Manual2 versions
    cpe:2.3:a:risc-v:instruction_set_manual:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:risc-v:instruction_set_manual:*:*:*:*:*:*:*:*
    • (no CPE)
  • RISC-V/RISC-Vllm-create
  • RISCV.org/Machine Trap Base Address (MTVEC) Registerv5
    Range: All versions

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.