CVE-2026-31413-BPF-Container-Escape

CVE-2026-31413: One Byte in the BPF Verifier to Container Escape I found a soundness bug in the Linux BPF verifier - a + 1 in a pushstack call that causes the verifier to skip an ALU instruction on a forked path. For BPFOR, this means the verifier tracks dst = 0 while the CPU computes 0 | K = K. ...

lean-cve-poc

CVE-2026-72844: Lean 4 Kernel Soundness Bug Proving0 = 1 axiom-free via nested inductive projection validation bypass. Field| Value ---|--- CVE| CVE-2026-72844 Advisory| VulnCheck VCSA Bug report| leanprover/lean414576 Fix| leanprover/lean414577 Affected| Lean 4 ≤ v4.31.0 / nightly ≤ 2026-07-27...

CVE-2026-62333

OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, MemoryMerkleAir does not forbid Merkle expansion rows at parentheight = 0 or below while expanddirection != 0. A malicious prover can...

CVE-2026-62333 OpenVM: MemoryMerkleAir allows below-leaf rows to alter memory roots

OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, MemoryMerkleAir does not forbid Merkle expansion rows at parentheight = 0 or below while expanddirection != 0. A malicious prover can...

CVE-2026-62333

The OpenVM zkVM framework is vulnerable to a flaw in the MemoryMerkleAir component (versions before 1.7.0 in the 1.x line, and affected 2.0 and 2.1 prereleases). The root cause is the failure to forbid Merkle expansion rows at parent_height $\le$ 0 when expand_direction is non-zero. This allows a...

CVE-2026-62333: openvm-org openvm: OpenVM is a performant and modular zkVM framework built for customization and extensibility

OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, MemoryMerkleAir does not forbid Merkle expansion rows at parentheight = 0 or below while expanddirection != 0. A malicious prover can...

...[ More ]

Lean 4 version 4.31.0 and earlier contain a kernel soundness vulnerability caused by improper validation of opaque declarations and stale free-variable inference-cache entries. A malicious metaprogram can exploit the missing closure check in the addopaque path to register an opaque constant of ty...

...[ More ]

Rocq Prover versions up to and including 9.2.0 contain a kernel soundness vulnerability in the termination guard checker. Recursive functions involving type transport through the rew construct can corrupt the internal recursive argument tree representation, allowing subsequent fixpoints to be...

CVE-2026-48100

Payy is an Ethereum L2 zk-rollup for privacy preserving and regulatory compliant transactions. Prior to version 1.3.0, aggagg forwards the compacted message stream from its inner proofs into a public messages: Field; 1000 array, but it never checks that the unused tail of the outer array is zero....

CVE-2026-48100

Prior to version 1.3.0 , the Payy Ethereum L2 zk-rollup suffered from a circuit soundness failure in the agg_agg function. The system failed to verify that the unused tail of a public messages array was zero, allowing a registered prover to insert forged burn messages into a valid proof. This fla...

CVE-2026-48100 Payy: agg_agg trailing message slots are unconstrained and allow forged burn messages

Payy is an Ethereum L2 zk-rollup for privacy preserving and regulatory compliant transactions. Prior to version 1.3.0, aggagg forwards the compacted message stream from its inner proofs into a public messages: Field; 1000 array, but it never checks that the unused tail of the outer array is zero....

CVE-2026-48100

Payy is an Ethereum L2 zk-rollup for privacy preserving and regulatory compliant transactions. Prior to version 1.3.0, aggagg forwards the compacted message stream from its inner proofs into a public messages: Field; 1000 array, but it never checks that the unused tail of the outer array is zero....

EUVD-2026-88359

Payy is an Ethereum L2 zk-rollup for privacy preserving and regulatory compliant transactions. Prior to version 1.3.0, aggagg forwards the compacted message stream from its inner proofs into a public messages: Field; 1000 array, but it never checks that the unused tail of the outer array is zero....

CVE-2026-48100 Payy: agg_agg trailing message slots are unconstrained and allow forged burn messages

Payy is an Ethereum L2 zk-rollup for privacy preserving and regulatory compliant transactions. Prior to version 1.3.0, aggagg forwards the compacted message stream from its inner proofs into a public messages: Field; 1000 array, but it never checks that the unused tail of the outer array is zero....

CVE-2026-48100: Acceptance of Extraneous Untrusted Data With Trusted Data

Payy is an Ethereum L2 zk-rollup for privacy preserving and regulatory compliant transactions. Prior to version 1.3.0, aggagg forwards the compacted message stream from its inner proofs into a public messages: Field; 1000 array, but it never checks that the unused tail of the outer array is zero....

RUSTSEC-2026-0310 Various panics, soundness and resource exhaustion issues

Version 0.12.3 fixes a large number of panics, soundness issues, and CPU and memory exhaustion issues in all parts of the crate. The following is a summary of the issues per affected components. For details, please see the release notes. Base Limited the number of compression pointers that are...

Various panics, soundness and resource exhaustion issues

Version 0.12.3 fixes a large number of panics, soundness issues, and CPU and memory exhaustion issues in all parts of the crate. The following is a summary of the issues per affected components. For details, please see the release notes. Base Limited the number of compression pointers that are...

PT-2026-106067

Version 0.12.3 fixes a large number of panics, soundness issues, and CPU and memory exhaustion issues in all parts of the crate. The following is a summary of the issues per affected components. For details, please see the release notes. Base Limited the number of compression pointers that are...

Compressed Permutation Oracles Revisited

The compressed permutation oracle has been used to analyze the quantum security of a number of cryptographic constructions which resisted prior techniques. However, these analyses were fundamentally limited by the poor soundness of the method: the technique was proven sound only up to $ON^1/12$...

CVE-2026-53671

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the abstract transformer in prevail treats writes through a TCTX-typed base register as a silent no-op: domemstore in src/crab/ebpftransformer.cpp only models TSTACK stores, and the...