Openvm-org vulnerabilities
We track 4 vulnerabilities in Openvm-org products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
Latest Openvm-org vulnerabilities
- 8.7 High severity
openvm: Improper Check for Unusual or Exceptional Conditions
OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, `OpenVmHalo2Verifier.verify` constructs raw proof calldata from user-controlled `proofData`, perf
- 8.7 High severity
OpenVM is a performant and modular zkVM framework built for customization and extensibility.
OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, `MemoryMerkleAir` does not forbid Merkle expansion rows at `parent_height` = 0 or below while `ex
- 7.5 High severity
OpenVM is a performant and modular zkVM framework built for customization and extensibility.
OpenVM is a performant and modular zkVM framework built for customization and extensibility. Prior to version 1.6.0, the openvm-pairing guest library's try_honest_pairing_check function invokes Theorem 3 of https://eprint.iacr.org/2024/640.pdf but does not che
- 7.8 High severity
openvm: Incorrect Calculation of Buffer Size
OpenVM is a performant and modular zkVM framework built for customization and extensibility. In version 1.0.0, OpenVM is vulnerable to overflow through byte decomposition of pc in AUIPC chip. A typo results in the highest limb of pc being range checked to 8-bi