SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2025-51678

HIGH · CVSS 7.5 EPSS 0.43% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-17 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

A vulnerability in RISC-V PicoRV32 can cause unexpected behavior due to a mismatch between the PCPI instruction and memory address. This issue poses a high risk, particularly for developers and organizations utilizing the affected architecture in critical applications. Immediate attention is recommended for those integrating or deploying PicoRV32 to mitigate potential exploitation risks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2025-51678
Severity
HIGH
CVSS
7.5
EPSS
0.43%

Original NVD Description

An issue was discovered in RISC-V PicoRV32 commit 87c89a. A mismatch in the PCPI INSN and memory address can lead to unexpected behavior.