Skip to content
OpenAdvisories

Package · crates.io

triton-vm

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium —

    Triton VM Soundness Vulnerability due to Missing Constraint

    The instruction `sponge_absorb_mem` Triton VM fails to verify that hashed values come from the claimed memory location. Malicious provers can substitute arbitrary data instead of actual memory contents. Any application using instruction `sponge_absorb_mem` to…