CVE-2025-63094

High · 7.5

CVSS

7.5

EPSS

0.6%

Published

Dec 10, 2025

CISA due date

—

The record

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache.

Affected packages

Ecosystem	Package	Introduced	Fixed