Xiangshan vulnerabilities
We track 3 vulnerabilities in Xiangshan products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 20, 2026.
Latest Xiangshan vulnerabilities
- 9.8 Critical severity
Nemu: Protection Mechanism Failure
NEMU contains an implementation flaw in its RISC-V Hypervisor CSR handling where henvcfg[7:4] (CBIE/CBCFE/CBZE-related fields) is incorrectly masked/updated based on menvcfg[7:4], so a machine-mode write to menvcfg can implicitly modify the hypervisor's enviro
- 7.5 High severity
Nemu: Incorrect Calculation of Buffer Size
NEMU (OpenXiangShan/NEMU) before v2025.12.r2 contains an improper instruction-validation flaw in its RISC-V Vector (RVV) decoder. The decoder does not correctly validate the funct3 field when decoding vsetvli/vsetivli/vsetvl, allowing certain invalid OP-V inst
- 7.5 High severity
Xiangshan: Exposure of Sensitive Information to an Unauthorized Actor
XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache.