Skip to content
OpenAdvisories

Package · Go

github.com/consensys/gnark-crypto

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    GHSA-fj2x-735w-74vq

    gnark-crypto allows unchecked memory allocation during vector deserialization

    The issue has been reported by @raefko from @fuzzinglabs. Excerpts from the report: > A critical vulnerability exists in the gnark-crypto library's `Vector.ReadFrom()` function that allows an attacker to trigger arbitrary memory allocation by crafting malicio…

    github.com/consensys/gnark-crypto Go