What is CVE-2021-41612?

CVE-2021-41612 is a high-severity vulnerability in Openrisc Mor1kx. CVSS score: 8.8/10. Published 2023-04-18.

How severe is CVE-2021-41612?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Openrisc Mor1kx

CVE-2021-41612

An issue was discovered in the ALU unit of the OpenRISC mor1kx processor. The carry flag is not being updated correctly for the subtract instruction, which results in an incorrect value of the carry flag. Any software that relies on this flag may experience corruption in execution.

EPSS: 0.011 (63.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Openrisc Mor1kx
Openrisc Mor1kx_firmware
N/a — versions n/a

References

cve@mitre.org (VDB Entry)
cve@mitre.org (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2021-41612?: CVE-2021-41612 is a high-severity vulnerability in Openrisc Mor1kx. CVSS score: 8.8/10. Published 2023-04-18.
How severe is CVE-2021-41612?: High severity. CVSS v3 base score is 8.8 out of 10.