What’s Vulnerable › Vulnerabilities

CVE-2021-40507

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-04-18 · updated 2026-06-17
• Weakness: CWE-287

Description

An issue was discovered in the ALU unit of the OR1200 (aka OpenRISC 1200) processor 2011-09-10 through 2015-11-11. The overflow flag is not being updated correctly for the subtract instruction, which results in an incorrect value in the overflow flag. Any software that relies on this flag may experience corruption in execution.

Affected products

• Openrisc Or1200 Firmware: from 2011-09-10 through 2015-11-11

References

• https://github.com/openrisc/or1200/commit/2c0765d7ba12813df273cd693a99c4e744f0fbd5
• https://seth.engr.tamu.edu/software-releases/thehuzz/
• https://github.com/openrisc/or1200/commit/2c0765d7ba12813df273cd693a99c4e744f0fbd5
• https://seth.engr.tamu.edu/software-releases/thehuzz/

Get alerted when CVE-2021-40507 or the next vulnerability affects your stack