Insufficient Validation in OpenVM 1.x and 2.x Frameworks
CVE-2026-62335
What is CVE-2026-62335?
The OpenVM framework, prior to version 1.7.0 in the 1.x series and in certain prereleases of the 2.0 and 2.1 versions, has a flaw in the OpenVmHalo2Verifier.verify method. This method accepts appExeCommit and appVmCommit as bytes32 values without verifying that they are less than the BN254 scalar field modulus. Although the method checks public-value and proof-data lengths, it does not prevent callers from supplying non-canonical 256-bit encodings that exceed or equal the modulus at the Solidity wrapper boundary. This oversight can lead to situations where applications relying on this wrapper inadvertently accept ambiguous app executable and app VM commitments, thus compromising verification processes. Fixes for this vulnerability are included in versions 1.7.0, 2.0.0-rc.3, and 2.1.0-preview.
Affected Version(s)
openvm < 1.7.0 < 1.7.0
openvm >= 2.0.0-alpha, < 2.0.0-rc.3 < 2.0.0-alpha, 2.0.0-rc.3
openvm >= 2.1.0-dev.0, < 2.1.0-preview < 2.1.0-dev.0, 2.1.0-preview