Computer security researchers at the CISPA Helmholtz Center for Information Security in Germany have found serious security flaws in some of Alibaba subsidiary T-Head Semiconductor’s RISC-V processors. The most serious of these, which affects the four T-Head C910 CPU cores in the TH1520 SoC, has been dubbed GhostWrite because it allows a rogue application or user to read and write physical memory, and execute arbitrary code with kernel (supervisor) and machine-mode privileges, allowing them to take over the device entirely.

Source: The Register