Approved changes feed: RSS · Atom

cpe:2.3:a:yosyshq:yosys:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorYosyshq (86a1b93d-4be9-507e-9ffb-97342d5eab25)
ProductYosys (2155727c-926c-5c5d-aef7-5602b8d5a594)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3407 vulnerable 2026-06-08 08:01:18.578693 YosysHQ yosys BLIF File rtlil.h set heap-based overflow
LOW (3.3)
A vulnerability was determined in YosysHQ yosys up to 0.62. This affects the function Yosys::RTLIL::Const::set of the file kernel/rtlil.h of the component BLIF File Parser. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. Applying a patch is the recommended action to fix this issue. It appears that the issue is not reproducible all the time.
Published: 2026-03-02T03:02:09.924Z
Updated: 2026-03-02T14:43:12.380Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.