The vulnerability resides in OpenSBI 1.3, a firmware implementation for RISC–V platforms. An attacker can send a malformed SBI call to function #2 or to the “Find and configure a matching counter” routine of the PMU extension, forcing the firmware to crash and causing a denial of service. This is caused by improper validation of request parameters, classified as CWE‑400, allowing crafted input to destabilize the firmware context. The resulting outage lasts until the system is rebooted or the firmware is replaced, and the CVSS score of 7.5 reflects a high potential impact.

The affected product is OpenSBI version 1.3. No other vendors or versions are listed in the CNA data, so the vulnerability is scoped to this firmware release. Systems that deploy this version of OpenSBI are potentially affected.

CVSS score 7.5 and an EPSS score of <1% (approximately 0.0026) indicate a high potential impact but a very low probability of exploitation at present. The bug is not listed in CISA’s KEV catalog. Exploitation requires the ability to send a crafted SBI request, implying at least local or privilege‑elevated access. When triggered, the firmware crashes, leading to a service outage until reboot or firmware replacement. While a public exploit has not been observed, the high severity of firmware failures means that any successful attack would have a severe impact on affected RISC‑V platforms.