Lucene search
K

6 matches found

OSV
OSV
added 2026/01/21 10:52 p.m.2 views

GHSA-RJR4-V43M-PXQ6 Triton VM has a Soundness Vulnerability due to Improper Sampling of Randomness

In affected versions of Triton VM, the verifier failed to correctly sample randomness in the FRI sub-protocol. Malicious provers can exploit this to craft proofs for arbitrary statements that this verifier accepts as valid, undermining soundness. Protocols that rely on proofs and the supplied...

6.3CVSS5.7AI score
Exploits0References4
Github Security Blog
Github Security Blog
added 2026/01/21 10:52 p.m.6 views

Triton VM has a Soundness Vulnerability due to Improper Sampling of Randomness

In affected versions of Triton VM, the verifier failed to correctly sample randomness in the FRI sub-protocol. Malicious provers can exploit this to craft proofs for arbitrary statements that this verifier accepts as valid, undermining soundness. Protocols that rely on proofs and the supplied...

5.7AI score
Exploits0References4Affected Software1
EUVD
EUVD
added 2026/01/21 10:52 p.m.1 views

EUVD-2026-4159

Triton VM Soundness Vulnerability due to Improper Sampling of Randomness...

5.4AI score
Exploits0References4
RustSec
RustSec
added 2026/01/21 12:0 p.m.5 views

Triton VM Soundness Vulnerability due to Improper Sampling of Randomness

In affected versions of Triton VM, the verifier failed to correctly sample randomness in the FRI sub-protocol. Malicious provers can exploit this to craft proofs for arbitrary statements that this verifier accepts as valid, undermining soundness. Protocols that rely on proofs and the supplied...

5.7AI score
Exploits0Affected Software1
OSV
OSV
added 2026/01/21 12:0 p.m.2 views

RUSTSEC-2026-0004 Triton VM Soundness Vulnerability due to Improper Sampling of Randomness

In affected versions of Triton VM, the verifier failed to correctly sample randomness in the FRI sub-protocol. Malicious provers can exploit this to craft proofs for arbitrary statements that this verifier accepts as valid, undermining soundness. Protocols that rely on proofs and the supplied...

5.8AI score
Exploits0References2
Cvelist
Cvelist
added 2023/05/10 11:41 a.m.14 views

CVE-2023-1732 Improper random reading in CIRCL

When sampling randomness for a shared secret, the implementation of Kyber and FrodoKEM, did not check whether crypto/rand.Read returns an error. In rare deployment cases error thrown by the Read function, this could lead to a predictable shared secret. The tkn20 and blindrsa components did not...

5.3CVSS8.3AI score0.00415EPSS
Exploits0References1
Rows per page
Query Builder