CVE-2026-29645

The record

NEMU (OpenXiangShan/NEMU) before v2025.12.r2 contains an improper instruction-validation flaw in its RISC-V Vector (RVV) decoder. The decoder does not correctly validate the funct3 field when decoding vsetvli/vsetivli/vsetvl, allowing certain invalid OP-V instruction encodings to be misinterpreted and executed as vset* configuration instructions rather than raising an illegal-instruction exception. This can be exploited by providing crafted RISC-V binaries to cause incorrect trap behavior, architectural state corruption/divergence, and potential denial of service in systems that rely on NEMU for correct execution or sandboxing.

Affected packages

Related vulnerabilities

• CVE-2026-106574 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-131
• CVE-2026-88830 A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a… CWE-131
• CVE-2026-84448 libheif is a HEIF and AVIF file format decoder and encoder. CWE-131
• CVE-2026-22590 eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard… CWE-131
• CVE-2026-78221 An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN… CWE-131
• CVE-2026-18743 A flaw was found in popt. CWE-131
• CVE-2026-78002 A flaw was found in rsyslog. CWE-131
• CVE-2026-16924 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a… CWE-131