CVE-2026-71694
UnknownSummary
An issue in the Berkeley Out-of-Order Machine (BOOM) / BoomTile RTL benchmark v1.2 (commit 2d08d0d8b4563212175212f9db0e69f6e68c9619) allows a remote attacker to execute arbitrary code via the CSR trap-return state restoration logic, MRET handling logic, mstatus.MPRV update path, and CSRFile logic.
Risk Assessment
The vulnerability may allow remote code execution in environments using this benchmark, potentially leading to compromise of system or data integrity.
Recommendation
Update the benchmark to the latest version or apply vendor-provided patches if available.
Original NVD description (English source)
An issue in Berkeley Out-of-Order Machine (BOOM) / BoomTile RTL benchmark v1.2 2d08d0d8b4563212175212f9db0e69f6e68c9619 allows a remote attacker to execute arbitrary code via the CSR trap-return state restoration logic, MRET handling logic, mstatus.MPRV update path, CSRFile logic in ProcessorFuzz BOOM benchmark Benchmarks/Verilog/SmallBoomTile_v1.2_state.v