libriscv vulnerabilities

Products

• libriscv 1

Latest libriscv CVEs

Newest publication first

1. CVE-2026-62958 libriscv: Out of bounds read vuln in the ELF parser (Denial of service)

   Published 2026-10-30

   High·CVSS 7.9 EPSS 0.21%

   libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the host emulator. Memory<W>::binary_loader checks PT_LOAD program-header bounds, but Memory<W>::serialize_execute_segment trusts section-header sh_offset and sh_size w...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.