THREATOPS
THREAT OPS › Threat News › [GHSA] GHSA-vjf8-9fx6-mv6x (medium) — Triton VM Soundness Vulnerability due to Missing Constraint

[GHSA] GHSA-vjf8-9fx6-mv6x (medium) — Triton VM Soundness Vulnerability due to Missing Constraint

medgithub_advisoriesPublished 2026-08-18

GHSA-vjf8-9fx6-mv6x Severity: medium CVE: None

Triton VM Soundness Vulnerability due to Missing Constraint

The instruction `sponge_absorb_mem` Triton VM fails to verify that hashed values come from the claimed memory location. Malicious provers can substitute arbitrary data instead of actual memory contents.

Any application using instruction `sponge_absorb_mem` to hash memory data can be given

Original source: https://github.com/advisories/GHSA-vjf8-9fx6-mv6x