CVE-2025-70956

A State Pollution vulnerability was discovered in the TON Virtual Machine (TVM) before v2025.04. The issue exists in the RUNVM instruction logic (VmState::run_child_vm), which is responsible for initializing child virtual machines. The operation moves critical resources (specifically libraries and log) from the parent state to a new child state in a non-atomic manner. If an Out-of-Gas (OOG) exception occurs after resources are moved but before the state transition is finalized, the parent VM retains a corrupted state where these resources are emptied/invalid. Because RUNVM supports gas isolation, the parent VM continues execution with this corrupted state, leading to unexpected behavior or denial of service within the contract's context.

• CWE-1321

• https://gist.github.com/Lucian-code233/beab9d14683ed2bdf5543be430b91c70
• https://github.com/ton-blockchain/ton/commit/1835d84602bbaaa1593270d7ab3bb0b499920416
• https://github.com/ton-blockchain/ton/releases/tag/v2025.04#:~:text=Arayz%2C%20Robinlzw%2C%20%40wy666444%20%40Lucian-code233
• https://mp.weixin.qq.com/s/ZD35baKUikefFdtNHZIC9g

Published

Feb 13, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-70949An observable timing discrepancy in @perfood/couch-auth v0.2…7.5
• CVE-2025-7095A vulnerability classified as critical has been found in Com…6.1
• CVE-2025-70950An issue in gohttp commit 34ea51 allows attackers to execute…7.3
• CVE-2025-70952pf4j before 20c2f80 has a path traversal vulnerability in th…7.5
• CVE-2025-70954A Null Pointer Dereference vulnerability exists in the TON V…7.5
• CVE-2025-70955A Stack Overflow vulnerability was discovered in the TON Vir…7.5
• CVE-2025-70957A Denial of Service (DoS) vulnerability was discovered in th…7.5
• CVE-2025-70958Multiple reflected cross-site scripting (XSS) vulnerabilitie…6.1
• CVE-2025-70959A stored cross-site scripting (XSS) vulnerability in the Job…5.4
• CVE-2025-7096A vulnerability classified as critical was found in Comodo I…8.8
• CVE-2025-70960A stored cross-site scripting (XSS) vulnerability in the For…5.4
• CVE-2025-70962Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Acc…7.5