Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-58157

gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithm

Description

gnark is a zero-knowledge proof system framework. In version 0.12.0, there is a potential denial of service vulnerability when computing scalar multiplication is using the fake-GLV algorithm. This is because the algorithm didn't converge quickly enough for some of the inputs. This issue has been patched in version 0.13.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Consensys gnark

  • = 0.12.0affected

References