Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
Miggo AIRoot Cause AnalysisThe vulnerability, as described, is a soundness issue in Triton VM's sponge_absorb_mem instruction, where it fails to verify that the data being hashed is actually from the claimed memory location. The provided commit 17c7ba0a directly addresses this. Analysis of the commit's patch shows that the file triton-air/src/table/processor.rs was modified. Specifically, the function instruction_sponge_absorb_mem, which is responsible for defining the algebraic constraints for the corresponding VM instruction, was updated. The patch introduces new constraints (read_from_ram) that explicitly enforce the reading of data from RAM. The original implementation was missing these constraints, which is the root cause of the vulnerability. Therefore, the instruction_sponge_absorb_mem function is the precise location of the flawed logic that enables the vulnerability.
instruction_sponge_absorb_memtriton-air/src/table/processor.rs
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| triton-vm | rust | >= 0.42.0-alpha.4, < 4.0.0 | 4.0.0 |