CVE-2025-51675

Received Received - Intake

Denial of Service in openRISC OR1200 Due to PC Update Issue

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: MITRE

Description

An issue was discovered in openRISC OR1200 commit 83ac6b. An inaccurate update of program counter (PC) values when SPR changes can lead to a Denial of Service (DoS).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-26

Last Modified

2026-08-26

Generated

2026-08-27

AI Q&A

2026-08-27

EPSS Evaluated

N/A

NVD

CVE-2025-51675

Affected Vendors & Products

Vendor	Product	Version / Range
openrisc	or1200	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability involves an issue in the openRISC OR1200 processor where incorrect updates to program counter (PC) values during SPR changes can cause a Denial of Service (DoS). This means the system may crash or become unresponsive due to improper handling of PC updates.

Impact Analysis

This vulnerability can lead to system crashes or unresponsiveness, disrupting normal operations. If exploited, it may cause downtime or require a system reboot, affecting availability and performance.

Compliance Impact

This vulnerability causes a Denial of Service (DoS) due to inaccurate program counter updates, which could disrupt system availability. Compliance impacts depend on system criticality but may affect availability requirements in standards like GDPR (data processing continuity) or HIPAA (system reliability for healthcare data).

Mitigation Strategies

Update the openRISC OR1200 core to a version that fixes the program counter update issue. Monitor for unusual system behavior or crashes that may indicate exploitation.

Hi! I’m here to help you understand CVE-2025-51675. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70