Exploitation ongoing with high activity in latest observed window (3 mentions)
Recommended action window: Immediate (within 24h)
NVD description
NEMU (OpenXiangShan/NEMU) before v2025.12.r2 contains an improper instruction-validation flaw in its RISC-V Vector (RVV) decoder. The decoder does not correctly validate the funct3 field when decoding vsetvli/vsetivli/vsetvl, allowing certain invalid OP-V instruction encodings to be misinterpreted and executed as vset* configuration instructions rather than raising an illegal-instruction exception. This can be exploited by providing crafted RISC-V binaries to cause incorrect trap behavior, architectural state corruption/divergence, and potential denial of service in systems that rely on NEMU for correct execution or sandboxing.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-29645 NEMU (OpenXiangShan/NEMU) before v2025.12.r2 contains an improper instruction-validation flaw in its RISC-V Vector (RVV) decoder. The decoder does not correctly valid… https://www.cve.org/CVERecord?id=CVE-2026-29645
Post summary
CVE-2026-29645 is an improper instruction‑validation flaw in NEMU's RISC‑V Vector decoder; the post is a disclosure of the vulnerability without evidence of exploitation or mitigation.
🚨*CVE* CVE-2026-29645 NEMU (OpenXiangShan/NEMU) before v2025.12.r2 contains an improper instruction-validation flaw in its RISC-V Vector (RVV) decoder. The decoder does not correctly valid… https://www.cve.org/CVERecord?id=CVE-2026-29645 ----- Traducción: CVE-2026-29645 NEM… http://infoflow.cloud`
Post summary
The post announces CVE-2026-29645, noting an improper instruction‑validation flaw in NEMU's RVV decoder, with no mention of PoC, exploit code, active exploitation, or patch details.
Some increased actor activities are shown targeting NEMU (CVE-2026-29645) https://vuldb.com/vuln/358354/cti
Post summary
The post indicates increased actor targeting of NEMU via CVE-2026-29645, suggesting active exploitation in the wild.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | xiangshan | nemu | 2025.12 | - | - |