CVE-2025-51677 Other in n/a

Critical 9.1 Published Updated

An output mismatch between RTL and netlist in the openRISC OR1200 CPU can cause unexpected behavior, affecting hardware designers and integrators.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2025-51677?

CVE-2025-51677 is a critical vulnerability in n/a, published on 17 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An issue was discovered in openRISC OR1200 commit 83ac6b. An output mismatch between the RTL and the netlist of the or1200 cpu output port can lead to unexpected behavior.

Weakness: CWE-116

Which versions are affected by CVE-2025-51677?

How do I fix CVE-2025-51677?

No fix has been published for CVE-2025-51677 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-51677 being exploited?

There is no known exploitation of CVE-2025-51677 in the wild and no public exploit code.

Sources

Also known as GHSA-27g6-g49f-v47g.

Is CVE-2025-51677 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free