CVE-2026-46669: falha de alta gravidade em openvm-org openvm
`openvm-pairing` pairing check missing proper subfield check on scaling factor
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.2%
OpenVM is a performant and modular zkVM framework built for customization and extensibility. Prior to version 1.6.0, the openvm-pairing guest library's try_honest_pairing_check function invokes Theorem 3 of https://eprint.iacr.org/2024/640.pdf but does not check that the scaling factor s is in a proper subfield of Fp12. This allows incorrect results to the pairing check. This issue has been patched in version 1.6.0.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Produtos afetados
openvm-org · openvmCVEs relacionadas — openvm-org openvm
No mesmo produto, das mais perigosas para as menos.
CVE-2026-62334HIGHOpenVM's OpenVmHalo2Verifier self-call can bypass proof verificationEPSS 0.5%CVE-2025-46723HIGHOpenVM byte decomposition of pc in AUIPC chip can overflowEPSS 0.5%CVE-2026-62333HIGHOpenVM: MemoryMerkleAir allows below-leaf rows to alter memory rootsEPSS 0.4%CVE-2026-62335MEDIUMOpenVM's OpenVmHalo2Verifier accepts non-canonical app commitmentsEPSS 0.4%