CVE-2025-70957
Denial of Service in TON Lite Server via Malicious Continuation Injection
Publication date: 2026-02-13
Last updated on: 2026-02-18
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ton | lite_server | to 2024.09 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-674 | The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a Denial of Service (DoS) issue found in the TON Lite Server before version 2024.09. It occurs because the server improperly handles external arguments passed to locally executed "get methods." An attacker can inject a specially crafted Continuation object, which is an internal type normally restricted within the TVM (TON Virtual Machine). When the TVM executes this malicious continuation, it uses excessive CPU resources while incurring very low virtual gas costs, effectively allowing the attacker to perform free computation.
This misuse of resources enables the attacker to monopolize the Lite Server's processing power, significantly reducing its throughput and causing a denial of service for legitimate users accessing the server through the gateway.
How can this vulnerability impact me? :
The vulnerability can severely impact users by causing a Denial of Service (DoS) on the TON Lite Server. An attacker exploiting this flaw can consume excessive CPU resources on the server, reducing its ability to process legitimate requests.
As a result, legitimate users may experience degraded performance or complete unavailability of services provided by the Lite Server, disrupting normal operations and access.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
I don't know