PT-2026-53650

Affected versions of solana rbpf expose the safe method EbpfVm::invoke function. This method computes an obfuscated VM pointer by casting self to mut u64 and applying a randomized offset derived from get runtime environment key. The resulting pointer arithmetic is performed with ptr::offset, whic...