CVE-2025-46723

OpenVM is a performant and modular zkVM framework built for customization and extensibility. In version 1.0.0, OpenVM is vulnerable to overflow through byte decomposition of pc in AUIPC chip. A typo results in the highest limb of pc being range checked to 8-bits instead of 6-bits. This results in the if statement never being triggered because the enumeration gives i=0,1,2, when instead the enumeration should give i=1,2,3, leaving pc_limbs[3] range checked to 8-bits instead of 6-bits. This leads to a vulnerability where the pc_limbs decomposition differs from the true pc, which means a malicious prover can make the destination register take a different value than the AUIPC instruction dictates, by making the decomposition overflow the BabyBear field. This issue has been patched in version 1.1.0.

• CWE-131

• https://cantina.xyz/code/c486d600-bed0-4fc6-aed1-de759fd29fa2/findings/21
• https://github.com/openvm-org/openvm/blob/0f94c8a3dfa7536c1231465d1bdee5fc607a5993/extensions/rv32im/circuit/src/auipc/core.rs#L135
• https://github.com/openvm-org/openvm/commit/68da4b50c033da5603517064aa0a08e1bbf70a01
• https://github.com/openvm-org/openvm/releases/tag/v1.1.0
• https://github.com/openvm-org/openvm/security/advisories/GHSA-jf2r-x3j4-23m7

Published

May 2, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-46718sudo-rs is a memory safe implementation of sudo and su writt…3.3
• CVE-2025-46719Open WebUI is a self-hosted artificial intelligence platform…5.4
• CVE-2025-4672The Offsprout Page Builder plugin for WordPress is vulnerabl…8.8
• CVE-2025-46720Keystone is a content management system for Node.js. Prior t…4.3
• CVE-2025-46721nosurf is cross-site request forgery (CSRF) protection middl…6.1
• CVE-2025-46722vLLM is an inference and serving engine for large language m…7.3
• CVE-2025-46724Langroid is a Python framework to build large language model…9.8
• CVE-2025-46725Langroid is a Python framework to build large language model…9.8
• CVE-2025-46726Langroid is a framework for building large-language-model-po…9.1
• CVE-2025-46727Rack is a modular Ruby web server interface. Prior to versio…7.5
• CVE-2025-46728cpp-httplib is a C++ header-only HTTP/HTTPS server and clien…7.5
• CVE-2025-46729julmud/phpDVDProfiler is an adoption of the defunct phpDVDPr…2.1