Skip to main content

RISC-V Summit North America Registration is OPEN! | Santa Clara, California | Oct 22-23 | Register Today

BlogFeatured Work

CVA6 RISC-V PMP Vulnerabilities against FIA

By August 26, 2025No Comments

Project Snapshot

Fault Injection Attacks (FIA) present considerable threats to the security and reliability of embedded systems. FIAs can compromise an embedded processor by altering its clock signal, power supply or by using electromagnetic pulses. This study focuses on analyzing the impact of FIA on the Physical Memory Protection (PMP) configuration flow within a CVA6 RISC-V core. We conducted fault injection campaigns on an FPGA implementation using an ARTY A7-100T board to characterize the resulting fault effects. To achieve this, we utilized clock glitches as the primary method of fault injection. Our experimental findings reveal that FIAs can induce various effects on PMP configuration registers. By categorizing these effects according to the injection parameters, we demonstrate that specific effects can be reliably achieved under varying injection conditions, often with a high probability of success for an attacker.

In Their Own Words

Poster Preview

Want to Dive Deeper?

Read the full paper on the author’s site

Continue Reading

Meet the Authors

Kévin QUENEHERVE

PHD Student in Electrical and Computer Engineering at Université Bretagne Sud (UBS) – Lab-STICC (UMR CNRS 6285) in France

Kevin Queneherve is a PhD student in the ARCAD team of Lab-STICC laboratory (UMR CNRS 6285) at Université Bretagne Sud (UBS), Lorient, France. After obtaining a master’s degree in CyberSecurity of Embedded Systems in UBS, he completed an end-of-study internship within the ARCAD team on the performance and security analysis of the memory isolation mechanism of RISC-V cores for embedded systems. His current research work focuses on the study and design of an embedded processor robust against fault-injection attacks.

Philippe TANGUY

Associate professor in Electrical and Computer Engineering at Université Bretagne Sud (UBS) – Lab-STICC (UMR CNRS 6285) in France

Philippe Tanguy is associate professor at Université de Bretagne Sud (UBS). He teaches at the Université de Bretagne Sud in the UFR SSI. He performs his research activities at Lab-STICC in the ARCAD team. He had a PhD in Electronics and digital communication at IETR. Currently, his research activities are dedicated to IoT system with a focus on the Cybersecurity issues.

Rachid DAFALI

Researcher Teacher at DGA MI in France

Vianney LAPÔTRE

Associate professor in Electrical and Computer Engineering at Université Bretagne Sud (UBS) – Lab-STICC (UMR CNRS 6285) in France

Vianney Lapôtre received his M.Sc and Ph.D in Electrical and Computer Engineering from the Université Bretagne Sud, France, in 2010 and 2013 respectively. In 2012, he spent six months as a visiting researcher at Ruhr University in Bochum, Germany.  From 2013 to 2014, he was a Postdoctoral at LIRMM, Montpellier. In 2023, he was awarded my habilitation to direct research (HDR). He is currently associate professor at University Bretagne Sud, France.

He is a member of the ARCAD team of the Lab-STICC laboratory. His research interests include hardware security, embedded processors and reconfigurable hardware architectures.