MEDIUMCVSS 6.9
GHSA-vjf8-9fx6-mv6x
Triton VM Soundness Vulnerability due to Missing Constraint
Summary
The instruction `sponge_absorb_mem` Triton VM fails to verify that hashed values come from the claimed memory location. Malicious provers can substitute arbitrary data instead of actual memory contents. Any application using instruction `sponge_absorb_mem` to hash memory data can be given a proof for a forged hash that doesn't correspond to the actual memory. This breaks the security of memory-based commitments. The flaw was corrected in commits `17c7ba0a` and `ef9d9e72` by including the appropriate constraints.
Affected packages
| Ecosystem | Package | Affected versions | Fixed versions |
|---|---|---|---|
| rust | triton-vm | — | 4.0.0 |
Remediation: Upgrade to 4.0.0 or later.
References
Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.