Buffer Overflow in OpenVM Framework Affects Customization and Extensibility

CVE-2025-46723

What is CVE-2025-46723?

The OpenVM framework suffers from a buffer overflow vulnerability due to inadequate range checking of the program counter during byte decomposition in the AUIPC instruction. A typo allows the highest limb of the program counter to be checked against an 8-bit range instead of the correct 6-bit range. As a result, the if condition that should perform a necessary operation is never triggered, leading to discrepancies in the pc_limbs decomposition. This flaw enables a malicious actor to manipulate the destination register to a value different from what the AUIPC instruction specifies, particularly affecting the BabyBear field. This issue was resolved in version 1.1.0.

References