CVE-2025-51678

HighCVSS 7.5/10Last modified Oct 13, 2026

Description

An issue was discovered in RISC-V PicoRV32 commit 87c89a. A mismatch in the PCPI INSN and memory address can lead to unexpected behavior.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-119CWE-704

Affected software

No affected versions have been published.

Timeline

Published
Jul 17, 2026
Last modified
Oct 13, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-516799.1An issue was discovered in openRISC OR1200 commit 83ac6b. A mismatch between the RTL and netlist can lead to unexpected behavior.CVE-2025-51685.5A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the functioCVE-2025-516829.8mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and gain access to adminisCVE-2025-516839.8A blind SQL Injection (SQLi) vulnerability in mJobtime v15.7.2 allows unauthenticated attackers to execute arbitrary SQL statements via a crCVE-2025-516846.1CleverTap Web SDK v1.15.1 is vulnerable to Cross Site Scripting (XSS). The application does not sanitize untrusted data received via window.CVE-2025-51695.5A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::ICVE-2025-516916.1Cross-Site Scripting (XSS) vulnerability found in MarkTwo commit e3a1d3f90cce4ea9c26efcbbf3a1cbfb9dcdb298 (May 2025) allows a remote attackeCVE-2025-51709.8A vulnerability classified as critical was found in llisoft MTA Maita Training System 4.5. This vulnerability affects the function AdminShitCVE-2025-51719.8A vulnerability, which was classified as critical, has been found in llisoft MTA Maita Training System 4.5. This issue affects the function CVE-2025-51729.8A vulnerability, which was classified as critical, was found in Econtrata up to 20250516. Affected is an unknown function of the file /validCVE-2025-517268.4CyberGhostVPNSetup.exe (Windows installer) is signed using the weak cryptographic hash algorithm SHA-1, which is vulnerable to collision attCVE-2025-51737.8A vulnerability has been found in HumanSignal label-studio-ml-backend up to 9fb7f4aa186612806af2becfb621f6ed8d9fdbaf and classified as probl
CVE-2025-51678: High severity, CVSS 7.5 | Vulnix