Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A Stack Overflow vulnerability was discovered in the TON Virtual Machine (TVM) before v2024.10. The vulnerability stems from the improper handling of vmstate and continuation jump instructions, which allow for continuous dynamic tail calls. An attacker can exploit this by crafting a smart contract with deeply nested jump logic. Even within permissible gas limits, this nested execution exhausts the host process's stack space, causing the validator node to crash. This results in a Denial of Service (DoS) for the TON blockchain network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2025-70955 A Stack Overflow vulnerability was discovered in the TON Virtual Machine (TVM) before v2024.10. The vulnerability stems from the improper handling of vmstate and cont… https://www.cve.org/CVERecord?id=CVE-2025-70955
Post summary
CVE-2025-70955 describes a stack‑overflow flaw in the TON Virtual Machine due to improper vmstate handling, with no PoC, exploit, or patch details disclosed.
CVE-2025-70955 Stack Overflow Vulnerability in TON Virtual Machine Enabling Denial of Service Attack https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-70955
Post summary
The post discloses CVE‑2025‑70955, a stack overflow vulnerability in the TON Virtual Machine that can be leveraged for denial‑of‑service attacks.