Skip to content
OpenAdvisories

Package · crates.io

risc0-aggregation

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.3
    CVE-2025-61588

    risc0 vulnerable to arbitrary code execution in guest via memory safety failure in `sys_read`

    RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARKs and the RISC-V microarchitecture. In versions 2.0.2 and below of risc0-zkvm-platform, when the zkVM guest calls sys_read, the host is able to use a crafted response to writ…

    risc0 risc0 risc0-zkvm risc0-zkvm-platform crates.io