Skip to content
OpenAdvisories

Package · crates.io

triton-vm

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium —
    GHSA-vjf8-9fx6-mv6x

    Triton VM Soundness Vulnerability due to Missing Constraint

    The instruction `sponge_absorb_mem` Triton VM fails to verify that hashed values come from the claimed memory location. Malicious provers can substitute arbitrary data instead of actual memory contents. Any application using instruction `sponge_absorb_mem` to…

    triton-vm crates.io
  • Low —
    GHSA-rjr4-v43m-pxq6

    Triton VM has a Soundness Vulnerability due to Improper Sampling of Randomness

    In affected versions of Triton VM, the verifier failed to correctly sample randomness in the FRI sub-protocol. Malicious provers can exploit this to craft proofs for arbitrary statements that this verifier accepts as valid, undermining soundness. Protocols th…

    triton-vm crates.io