CVE-2025-51679: n/a

This vulnerability involves a mismatch between the Register Transfer Level (RTL) and netlist in the openRISC OR1200 commit 83ac6b. Such a mismatch can cause the hardware to behave unexpectedly, which may result in high-impact consequences such as loss of confidentiality and denial of service. The CVSS vector indicates the vulnerability is remotely exploitable with low attack complexity, no privileges required, and no user interaction needed. However, no remediation level or patch information is provided, and no exploits are known in the wild.

The vulnerability can lead to unexpected hardware behavior, impacting confidentiality and causing denial of service. The CVSS score of 9.1 reflects critical severity with high confidentiality impact and high availability impact, but no integrity impact. This suggests attackers could potentially extract sensitive information or disrupt system availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation is currently documented. Users should monitor vendor communications for updates and consider risk mitigation strategies appropriate to hardware design flaws.