openvm-org

Products

ProductCVEsExploitedLatest
openvm5–Oct 30, 2026

Exploited and recent CVEs

  • CVE-2026-62333 High 8.7 OpenVM: MemoryMerkleAir allows below-leaf rows to alter memory roots 0.4%
  • CVE-2026-62334 High 8.7 OpenVM's OpenVmHalo2Verifier self-call can bypass proof verification 0.5%
  • CVE-2026-62335 Medium 6.9 OpenVM's OpenVmHalo2Verifier accepts non-canonical app commitments 0.4%
  • CVE-2026-46669 High 8.7 `openvm-pairing` pairing check missing proper subfield check on scaling factor 0.2%
  • CVE-2025-46723 High 7.8 OpenVM byte decomposition of pc in AUIPC chip can overflow 0.5%