Vulnerability
Floating Point Value Injection
Instructions that depend on a floating-point result can run on a wrong value before a microcode assist fixes it, which an attacker can steer.
- Also known as
- FPVI
- Kind
- Transient execution
- CVEs
- 2
- Published
- 2021
CVEs
| CVE | Name | Vendors | Published |
|---|---|---|---|
| CVE-2021-0086 | Floating Point Value Injection (FPVI) | Intel | 2021-06-09 |
| CVE-2021-26314 | Floating Point Value Injection (described below) | AMD | 2021-06-09 |
CVEs without a page of their own
The sources give these CVEs too few facts of their own (affected processors, a mitigation, a check) for a page; this is what they say.
CVE-2021-26314: Floating Point Value Injection
AMD's CVE for the same method: it lists every supported processor, exploitable only through a matching gadget in software, and leaves the fix to software vendors. AMD-SB-1003. Source. CVE record (2021-06-09).