PatchTheCVErisvc-boom vulnerabilities and fixes
Recent CVEs affecting risvc-boom, with upgrade or downgrade steps. 1 tracked.
Also searched as: risvc boom.
risvc-boom has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-08-09. Highest priority: CVE-2025-8774 (score 10/100).
- CVE-2025-8774 LOW 2.5 UPGRADE A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic
FAQ
How do I fix risvc-boom vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is risvc-boom being exploited right now?
None of the tracked risvc-boom CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which risvc-boom CVE should I patch first?
CVE-2025-8774 currently ranks highest (10/100): A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic.