High, CVSS 7.8crates.ioPublished
OpenVM allows the byte decomposition of pc in AUIPC chip to overflow
CVE-2025-46723 · GHSA-jf2r-x3j4-23m7
- Affected
- crates.io openvm >= 1.0.0, <= 1.0.0
- Fixed in
- 1.1.0· Vendor fix available
- Issue
- The fix to https://cantina.xyz/code/c486d600-bed0-4fc6-aed1-de759fd29fa2/findings/21 has a typo that still results in the highest limb of pc being range checked to 8-bits instead of 6-bits. In the AIR, we do https://github.com/openvm-org/openvm/blob/0f94c8a3dfa7536c1231465d1bdee5fc607a5993/extensions/rv32im/circuit/src/auipc/core.rs#L135 It should be Right now the if statement is never triggered because the enumeration gives i=0,1,2 when we instead want i=1,2,3. What this means is that pclimbs[3] is range checked to 8-bits instead of 6-bits. This leads to a vulnerability where the pclimbs decomposition differs from the true pc, which means a malicious prover can make the destination register take a different value than the AUIPC instruction dictates, by making the decomposition overflow the BabyBear field.
Recommended action: Upgrade to 1.1.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.